CVE-2026-74475

In the Linux kernel, the following vulnerability has been resolved:

vxlan: use neighhasnapshot() in route_shortcircuit()

The neighbour hardware address n->ha can be updated asynchronously by the neighbour subsystem, protected by n->ha_lock seqlock. Reading n->ha without holding the seqlock loop can lead to torn reads or reading a partially updated MAC address.

Use neighhasnapshot() in routeshortcircuit() to safely copy n->ha under readseqbegin()/read_seqretry() lock protection before using it.

Note that arpreduce() and neighreduce() seem to have the same issue left for future patches.