[Under Evaluation – CVE-2026-74475]: Linux kernel VXLAN drivers/net/vxlan/vxlan_core.c reads neighbor n->ha without n->ha_lock seqlock in route_shortcircuit(), allowing torn/partial MAC reads during ARP/NDP churn. In VXLAN VTEP/SDN forwarding, remote traffic can trigger mis-encapsulation and cross-tenant redirection/leakage (CVSS 10.0). Affects Linux >=3.8. Patch by updating to 6.6.151+, 6.12.103+, 6.18.44+ or 7.1.8+ (uses neigh_ha_snapshot()).