CVE-2026-90106 PUBLISHED

net: bridge: arp/nd proxy: fix reading neigh ha

Assigner: Linux
Reserved: 11.09.2026 Published: 17.09.2026 Updated: 17.09.2026

In the Linux kernel, the following vulnerability has been resolved:

net: bridge: arp/nd proxy: fix reading neigh ha

Currently neigh ha address is read directly, but that can result in torn/partial reads if the neigh is being updated. Use neigh_ha_snapshot to take a stable snapshot of the address.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 057658cb33fbf4d4309f01fe8845903b1cd07fad to 291c9e137b7c74e8a512cded4845352da4c4adda (excl.)
  • affected from 057658cb33fbf4d4309f01fe8845903b1cd07fad to 57549ab9079122991dfa0f8248ca00e101e8e69b (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 4.15 is affected
  • unaffected from 0 to 4.15 (excl.)
  • unaffected from 7.2.6 to 7.2.* (incl.)
  • unaffected from 7.3-rc1 to * (incl.)

References