AZL-96015
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-96015.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-96015
- Upstream
- Published
- 2026-08-15T13:17:52Z
- Modified
- 2026-08-31T05:26:27Z
- Summary
- CVE-2026-74475 affecting package kernel 6.6.150.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
vxlan: use neighhasnapshot() in route_shortcircuit()
The neighbour hardware address n->ha can be updated asynchronously by the neighbour subsystem, protected by n->ha_lock seqlock. Reading n->ha without holding the seqlock loop can lead to torn reads or reading a partially updated MAC address.
Use neighhasnapshot() in routeshortcircuit() to safely copy n->ha under readseqbegin()/read_seqretry() lock protection before using it.
Note that arpreduce() and neighreduce() seem to have the same issue left for future patches.
- References