Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-64077

netfilter: ebtables: move to two-stage removal scheme

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: move to two-stage removal scheme Like previous patches for x_tables, follow same pattern in ebtables. We can't reuse xt helpers: ebt_table struct layout is incompatible. table->ops assignment is now done while still holding the ebt mutex to make sure we never expose partially-filled table struct.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 87663c39f898b18905499126548da61450628682 to < 6fe4c808b6cdb405ed64ea6e740d557bba3d7745affected
  • 87663c39f898b18905499126548da61450628682 to < f34e5a674afe743d1af80684d64b511f40a5c35daffected
  • 87663c39f898b18905499126548da61450628682 to < 739d5dac7b2da44a756aa4d758ee3f1ccf5a27f1affected
  • 87663c39f898b18905499126548da61450628682 to < ef395579a7631a06d61969fc712eb80402231b89affected
  • 87663c39f898b18905499126548da61450628682 to < b7f0544d86d439cb946515d2ef6a0a75e8626710affected

Linux Linux

Default version status: affected

  • 5.15affected
  • 0 to < 5.15unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.114 to ≤ 6.12.*unaffected
  • 6.18.34 to ≤ 6.18.*unaffected
  • 7.0.11 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References