CVE-2026-74475

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the vxlan module, the route shortcircuit() function reads the neighbour hardware address n->ha without holding the n->ha lock seqlock. Because the neighbour subsystem can update n->ha asynchronously, this lack of synchronization can result in torn reads or the retrieval of a partially updated MAC address. A seqlock is a synchronization mechanism used to allow multiple readers to access data while a single writer can modify it.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.