CVE-2026-74475

Last refreshed2026-10-17

Status: UPDATED | Advisory ID: CVE-2026-74475

Key Details

CVE	CVE-2026-74475
CVSS Score / Version	10.0 (Critical) / CVSS v3.1
Updated	2026-10-16
CVSS Vector	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L`
CVSS Prose	attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is low.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

vxlan: use neigh_ha_snapshot() in route_shortcircuit()

The neighbour hardware address n->ha can be updated asynchronously by the

neighbour subsystem, protected by n->ha_lock seqlock. Reading n->ha without

holding the seqlock loop can lead to torn reads or reading a partially updated

MAC address.

Use neigh_ha_snapshot() in route_shortcircuit() to safely copy n->ha under

read_seqbegin()/read_seqretry() lock protection before using it.

Note that arp_reduce() and neigh_reduce() seem to have the same issue

left for future patches. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-74475
CVE	https://www.cve.org/CVERecord?id=CVE-2026-74475

Source

Reference

NVD

CVE