CVE-2026-90106

CVE-2026-90106

published September 17, 2026

CVSS
—
EPSS
0%
Percentile
10.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: bridge: arp/nd proxy: fix reading neigh ha

Currently neigh ha address is read directly, but that can result in

torn/partial reads if the neigh is being updated. Use neigh_ha_snapshot

to take a stable snapshot of the address.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00209 · 10.5th percentile
Published
2026-09-17T21:17Z
References (5)
https://git.kernel.org/stable/c/291c9e137b7c74e8a512cded4845352da4c4adda · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/490c72868443ff90f47f4ccbaaff1eaf8fed46ab · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/57549ab9079122991dfa0f8248ca00e101e8e69b · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/884cbf15ccd3980bcc9583073045f91798a86d4e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a178bcb01051688fb085ffb72cc4b13b5df0fc0f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 19 SEP 03:55Z
    EPSS moved — → 0%
    epss
  • 17 SEP 16:06Z
    net: bridge: arp/nd proxy: fix reading neigh ha
    cvelistv5