Answer in brief
CVE-2026-74475 records a Unknown severity vulnerability in vxlan: use neigh_ha_snapshot() in route_shortcircuit(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=e4f67addf158f98f8197e08974966b18480dc751 <d08e8ac13f2e228cc7fc3c70b5ebe71557b624a0 || >=e4f67addf158f98f8197e08974966b18480dc751 <ec341bb76d77b4c2948764375ee6bfeef4bb41c3 || >=e4f67addf158f98f8197e08974966b18480dc751 <ff89415d34c3ab9f5312316423122e664ed3524f || >=e4f67addf158f98f8197e08974966b18480dc751 <05f2987f73daa05333fd713d05546142f9f7c5f0 || >=e4f67addf158f98f8197e08974966b18480dc751 <8eca411347e1d38964f9ed2c8d3b6ab0e7e4473d | d08e8ac13f2e228cc7fc3c70b5ebe71557b624a0, ec341bb76d77b4c2948764375ee6bfeef4bb41c3, ff89415d34c3ab9f5312316423122e664ed3524f, 05f2987f73daa05333fd713d05546142f9f7c5f0, 8eca411347e1d38964f9ed2c8d3b6ab0e7e4473d |
| Linux/Linuxgeneric | 3.8 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: vxlan: use neigh_ha_snapshot() in route_shortcircuit() The neighbour hardware address n->ha can be updated asynchronously by the neighbour subsystem, protected by n->ha_lock seqlock. Reading n->ha without holding the seqlock loop can lead to torn reads or reading a partially updated MAC address. Use neigh_ha_snapshot() in route_shortcircuit() to safely copy n->ha under read_seqbegin()/read_seqretry() lock protection before using it. Note that arp_reduce() and neigh_reduce() seem to have the same issue left for future patches.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-74475 records a Unknown severity vulnerability in vxlan: use neigh_ha_snapshot() in route_shortcircuit(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=e4f67addf158f98f8197e08974966b18480dc751 <d08e8ac13f2e228cc7fc3c70b5ebe71557b624a0 || >=e4f67addf158f98f8197e08974966b18480dc751 <ec341bb76d77b4c2948764375ee6bfeef4bb41c3 || >=e4f67addf158f98f8197e08974966b18480dc751 <ff89415d34c3ab9f5312316423122e664ed3524f || >=e4f67addf158f98f8197e08974966b18480dc751 <05f2987f73daa05333fd713d05546142f9f7c5f0 || >=e4f67addf158f98f8197e08974966b18480dc751 <8eca411347e1d38964f9ed2c8d3b6ab0e7e4473d | d08e8ac13f2e228cc7fc3c70b5ebe71557b624a0, ec341bb76d77b4c2948764375ee6bfeef4bb41c3, ff89415d34c3ab9f5312316423122e664ed3524f, 05f2987f73daa05333fd713d05546142f9f7c5f0, 8eca411347e1d38964f9ed2c8d3b6ab0e7e4473d |
| Linux/Linuxgeneric | 3.8 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: vxlan: use neigh_ha_snapshot() in route_shortcircuit() The neighbour hardware address n->ha can be updated asynchronously by the neighbour subsystem, protected by n->ha_lock seqlock. Reading n->ha without holding the seqlock loop can lead to torn reads or reading a partially updated MAC address. Use neigh_ha_snapshot() in route_shortcircuit() to safely copy n->ha under read_seqbegin()/read_seqretry() lock protection before using it. Note that arp_reduce() and neigh_reduce() seem to have the same issue left for future patches.
Quoted source text, attributed separately from HOL analysis.