10
CVE-2026-74475
- EPSS 0.45%
- Veröffentlicht 15.08.2026 12:27:10
- Zuletzt bearbeitet 19.08.2026 17:21:04
- CVE-Watchlists
- Unerledigt
vxlan: use neigh_ha_snapshot() in route_shortcircuit()
In the Linux kernel, the following vulnerability has been resolved: vxlan: use neigh_ha_snapshot() in route_shortcircuit() The neighbour hardware address n->ha can be updated asynchronously by the neighbour subsystem, protected by n->ha_lock seqlock. Reading n->ha without holding the seqlock loop can lead to torn reads or reading a partially updated MAC address. Use neigh_ha_snapshot() in route_shortcircuit() to safely copy n->ha under read_seqbegin()/read_seqretry() lock protection before using it. Note that arp_reduce() and neigh_reduce() seem to have the same issue left for future patches.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt
Linux
Default Statusunaffected
Version
e4f67addf158f98f8197e08974966b18480dc751
Version <
32a9590a8d30426e3db63e6b20893e47e02576c0
Status
affected
Version
e4f67addf158f98f8197e08974966b18480dc751
Version <
d0993fc053f29e15cc7c9fe2029df3882a2ab5ab
Status
affected
Version
e4f67addf158f98f8197e08974966b18480dc751
Version <
87210054bad82bbae6f483a742dc45722fb47a6b
Status
affected
Version
e4f67addf158f98f8197e08974966b18480dc751
Version <
d08e8ac13f2e228cc7fc3c70b5ebe71557b624a0
Status
affected
Version
e4f67addf158f98f8197e08974966b18480dc751
Version <
ec341bb76d77b4c2948764375ee6bfeef4bb41c3
Status
affected
Version
e4f67addf158f98f8197e08974966b18480dc751
Version <
ff89415d34c3ab9f5312316423122e664ed3524f
Status
affected
Version
e4f67addf158f98f8197e08974966b18480dc751
Version <
05f2987f73daa05333fd713d05546142f9f7c5f0
Status
affected
Version
e4f67addf158f98f8197e08974966b18480dc751
Version <
8eca411347e1d38964f9ed2c8d3b6ab0e7e4473d
Status
affected
HerstellerLinux
≫
Produkt
Linux
Default Statusaffected
Version
3.8
Status
affected
Version
0
Version <
3.8
Status
unaffected
Version <=
5.10.*
Version
5.10.265
Status
unaffected
Version <=
5.15.*
Version
5.15.216
Status
unaffected
Version <=
6.1.*
Version
6.1.183
Status
unaffected
Version <=
6.6.*
Version
6.6.151
Status
unaffected
Version <=
6.12.*
Version
6.12.103
Status
unaffected
Version <=
6.18.*
Version
6.18.44
Status
unaffected
Version <=
7.1.*
Version
7.1.8
Status
unaffected
Version <=
*
Version
7.2
Status
unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.45% | 0.379 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | 10 | 3.9 | 6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L
|
https://git.kernel.org/stable/c/d08e8ac13f2e228cc7fc3c70b5ebe71557b624a0
https://git.kernel.org/stable/c/ec341bb76d77b4c2948764375ee6bfeef4bb41c3
https://git.kernel.org/stable/c/ff89415d34c3ab9f5312316423122e664ed3524f
https://git.kernel.org/stable/c/05f2987f73daa05333fd713d05546142f9f7c5f0
https://git.kernel.org/stable/c/8eca411347e1d38964f9ed2c8d3b6ab0e7e4473d
https://git.kernel.org/stable/c/32a9590a8d30426e3db63e6b20893e47e02576c0
https://git.kernel.org/stable/c/87210054bad82bbae6f483a742dc45722fb47a6b
https://git.kernel.org/stable/c/d0993fc053f29e15cc7c9fe2029df3882a2ab5ab