Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-64076

netfilter: bridge: eb_tables: close module init race

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: eb_tables: close module init race sashiko reports for unrelated patch: Does the core ebtables initialization in ebtables.c suffer from a similar race? Once nf_register_sockopt() completes, the sockopts are exposed globally. sockopt has to be registered last, just like in ip/ip6/arptables.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 5b53951cfc85329d29df9d07b1e905f4563546a5 to < 5fc488f46086d17e8e545d8104ddd95b175de218affected
  • 5b53951cfc85329d29df9d07b1e905f4563546a5 to < 6bb35bdaabb22fd2d86b601904e928dbaa537941affected
  • 5b53951cfc85329d29df9d07b1e905f4563546a5 to < c647e2a21bbbaceda6cdb8a44a56f44d231dc4b4affected
  • 5b53951cfc85329d29df9d07b1e905f4563546a5 to < 02d999dc69b3918dba2414932b5d95f1f75c76cbaffected
  • 5b53951cfc85329d29df9d07b1e905f4563546a5 to < 27414ff1b287ea9a2a11675149ec28e05539f3ccaffected

Linux Linux

Default version status: affected

  • 5.13affected
  • 0 to < 5.13unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.114 to ≤ 6.12.*unaffected
  • 6.18.34 to ≤ 6.18.*unaffected
  • 7.0.11 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References