CVE-2026-74475Disclosure

LOWCVSS 10.0 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: vxlan: use neigh_ha_snapshot() in route_shortcircuit() The neighbour hardware address n->ha can be updated asynchronously by the neighbour subsystem, protected by n->ha_lock seqlock. Reading n->ha without holding the seqlock loop can lead to torn reads or reading a partially updated MAC address. Use neigh_ha_snapshot() in route_shortcircuit() to safely copy n->ha under read_seqbegin()/read_seqretry() lock protection before using it. Note that arp_reduce() and neigh_reduce() seem to have the same issue left for future patches.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Full discourse1 post

Upwind Security MDR@UpwindMDR46d
Disclosure
🚨Critical - Linux kernel VXLAN unlocked neighbor MAC read → cross-tenant traffic leakage (CVE-2026-74475) route_shortcircuit() in drivers/net/vxlan/vxlan_core.c reads n->ha without the ha_lock seqlock, so ARP/NDP churn yields a torn MAC — on VXLAN VTEPs, remote traffic can force mis-encapsulation that redirects or leaks frames across tenants (CVSS 10.0). 👉Affected: Linux >= 3.8 | Upgrade to 6.6.151+, 6.12.103+, 6.18.44+ or 7.1.8+
Post summary
CVE‑2026‑74475 exposes a critical race in Linux kernel VXLAN leading to cross‑tenant traffic leakage; the post details the vulnerability and provides kernel upgrade recommendations.
00000103
292 followersView on X

Explore more

Back to dashboard