Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-72349

netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() On links faster than ~34 Gbps, where byte rate may exceed 2^32-1 (~ 4.3 GBps), the comparison result becomes incorrect because the truncated value no longer reflects the actual estimator rate. Fix by changing the local variables to u64.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1c0d32fde5bdf1184bc274f864c09799278a1114 to < 77e9ba358d63fe2eb03c90d29ea85651d95cf2e6affected
  • 1c0d32fde5bdf1184bc274f864c09799278a1114 to < a3ba938f45cb00f6bf49d3aa3647df9b017f5f08affected
  • 1c0d32fde5bdf1184bc274f864c09799278a1114 to < bab305dd769d78074adca73505cc2509e1206bf2affected
  • 1c0d32fde5bdf1184bc274f864c09799278a1114 to < 5da915fc159c6b4091669447588e520183969ccaaffected
  • 1c0d32fde5bdf1184bc274f864c09799278a1114 to < d5cc4c12a4b90bf099199c3c49ecda7e694f2a2baffected
  • 1c0d32fde5bdf1184bc274f864c09799278a1114 to < e702f6dd5d21e331f55fd9168c0210542008546daffected
  • 1c0d32fde5bdf1184bc274f864c09799278a1114 to < 905a927b2e6fec7b174e9e5644d271047b61378faffected
  • 1c0d32fde5bdf1184bc274f864c09799278a1114 to < 444853cd438201007da5359821adcc2995655ab1affected

Linux Linux

Default version status: affected

  • 4.10affected
  • 0 to < 4.10unaffected
  • 5.10.261 to ≤ 5.10.*unaffected
  • 5.15.212 to ≤ 5.15.*unaffected
  • 6.1.178 to ≤ 6.1.*unaffected
  • 6.6.145 to ≤ 6.6.*unaffected
  • 6.12.97 to ≤ 6.12.*unaffected
  • 6.18.40 to ≤ 6.18.*unaffected
  • 7.1.5 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References