In the Linux kernel, the following vulnerability has been resolved:

net: bridge: arp/nd proxy: fix reading neigh ha

Currently neigh ha address is read directly, but that can result in
torn/partial reads if the neigh is being updated. Use neigh_ha_snapshot
to take a stable snapshot of the address.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00215.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
057658cb33fbf4d4309f01fe8845903b1cd07fad affected < 2365b25b4add42bb5f652920b45bc9ad0e35cbc7
057658cb33fbf4d4309f01fe8845903b1cd07fad affected < 490c72868443ff90f47f4ccbaaff1eaf8fed46ab
057658cb33fbf4d4309f01fe8845903b1cd07fad affected < a178bcb01051688fb085ffb72cc4b13b5df0fc0f
057658cb33fbf4d4309f01fe8845903b1cd07fad affected < 884cbf15ccd3980bcc9583073045f91798a86d4e
057658cb33fbf4d4309f01fe8845903b1cd07fad affected < 291c9e137b7c74e8a512cded4845352da4c4adda
057658cb33fbf4d4309f01fe8845903b1cd07fad affected < 57549ab9079122991dfa0f8248ca00e101e8e69b
Linux Linux affected
Version Status Constraints
4.15 affected —
0 unaffected < 4.15
6.1.191 unaffected ≤ 6.1.*
6.6.160 unaffected ≤ 6.6.*
6.12.114 unaffected ≤ 6.12.*
6.18.57 unaffected ≤ 6.18.*
7.2.6 unaffected ≤ 7.2.*
7.3 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/2365b25b4add42bb5f652920b45bc9ad0e35cbc7 cve-icon cve-icon
https://git.kernel.org/stable/c/291c9e137b7c74e8a512cded4845352da4c4adda cve-icon cve-icon
https://git.kernel.org/stable/c/490c72868443ff90f47f4ccbaaff1eaf8fed46ab cve-icon cve-icon
https://git.kernel.org/stable/c/57549ab9079122991dfa0f8248ca00e101e8e69b cve-icon cve-icon
https://git.kernel.org/stable/c/884cbf15ccd3980bcc9583073045f91798a86d4e cve-icon cve-icon
https://git.kernel.org/stable/c/a178bcb01051688fb085ffb72cc4b13b5df0fc0f cve-icon cve-icon
History

Fri, 30 Oct 2026 12:45:00 +0000

Type Values Removed Values Added
References

Wed, 21 Oct 2026 13:15:00 +0000

Type Values Removed Values Added
References

Thu, 15 Oct 2026 13:30:00 +0000

Type Values Removed Values Added
References

Sun, 20 Sep 2026 04:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-362

Thu, 17 Sep 2026 16:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: net: bridge: arp/nd proxy: fix reading neigh ha Currently neigh ha address is read directly, but that can result in torn/partial reads if the neigh is being updated. Use neigh_ha_snapshot to take a stable snapshot of the address.
Title net: bridge: arp/nd proxy: fix reading neigh ha
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-10-30T12:34:10.967Z

Reserved: 2026-09-11T19:38:34.787Z

Link: CVE-2026-90106

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-17T17:17:02.463

Modified: 2026-10-30T13:20:41.823

Link: CVE-2026-90106

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-20T03:45:12Z

Weaknesses