Riskcovery

CVE-2026-64076

netfilter: bridge: eb_tables: close module init race

State
Published
Severity
7.8 High
Published
Jul 19, 2026
Updated
Oct 30, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: bridge: eb_tables: close module init race

sashiko reports for unrelated patch: Does the core ebtables initialization in ebtables.c suffer from a similar race? Once nf_register_sockopt() completes, the sockopts are exposed globally.

sockopt has to be registered last, just like in ip/ip6/arptables.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

ProductVersions
LinuxLinux
  • 5b53951cfc85329d29df9d07b1e905f4563546a5 to before e0e7dec9dfc02987598e6a42bdfcab51dcc43e10Affected
  • 5b53951cfc85329d29df9d07b1e905f4563546a5 to before 5fc488f46086d17e8e545d8104ddd95b175de218Affected
  • 5b53951cfc85329d29df9d07b1e905f4563546a5 to before 6bb35bdaabb22fd2d86b601904e928dbaa537941Affected
  • 5b53951cfc85329d29df9d07b1e905f4563546a5 to before c647e2a21bbbaceda6cdb8a44a56f44d231dc4b4Affected
  • 5b53951cfc85329d29df9d07b1e905f4563546a5 to before 02d999dc69b3918dba2414932b5d95f1f75c76cbAffected
  • 5b53951cfc85329d29df9d07b1e905f4563546a5 to before 27414ff1b287ea9a2a11675149ec28e05539f3ccAffected
LinuxLinux
  • 5.13Affected
  • before 5.13Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.34 through 6.18.*Not affected
  • 7.0.11 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.