CVE-2026-64077

netfilter: ebtables: move to two-stage removal scheme

State: Published
Severity: 7.8 High
Published: Jul 19, 2026
Updated: Oct 30, 2026
Reserved: Jul 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ebtables: move to two-stage removal scheme

Like previous patches for x_tables, follow same pattern in ebtables. We can't reuse xt helpers: ebt_table struct layout is incompatible.

table->ops assignment is now done while still holding the ebt mutex to make sure we never expose partially-filled table struct.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

Product	Versions
LinuxLinux	87663c39f898b18905499126548da61450628682 to before b37e27f5d5cbb7723644fdf089e28a216d6093edAffected 87663c39f898b18905499126548da61450628682 to before 6fe4c808b6cdb405ed64ea6e740d557bba3d7745Affected 87663c39f898b18905499126548da61450628682 to before f34e5a674afe743d1af80684d64b511f40a5c35dAffected 87663c39f898b18905499126548da61450628682 to before 739d5dac7b2da44a756aa4d758ee3f1ccf5a27f1Affected 87663c39f898b18905499126548da61450628682 to before ef395579a7631a06d61969fc712eb80402231b89Affected 87663c39f898b18905499126548da61450628682 to before b7f0544d86d439cb946515d2ef6a0a75e8626710Affected
LinuxLinux	5.15Affected before 5.15Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.114 through 6.12.Not affected 6.18.34 through 6.18.Not affected 7.0.11 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

87663c39f898b18905499126548da61450628682 to before b37e27f5d5cbb7723644fdf089e28a216d6093edAffected
87663c39f898b18905499126548da61450628682 to before 6fe4c808b6cdb405ed64ea6e740d557bba3d7745Affected
87663c39f898b18905499126548da61450628682 to before f34e5a674afe743d1af80684d64b511f40a5c35dAffected
87663c39f898b18905499126548da61450628682 to before 739d5dac7b2da44a756aa4d758ee3f1ccf5a27f1Affected
87663c39f898b18905499126548da61450628682 to before ef395579a7631a06d61969fc712eb80402231b89Affected
87663c39f898b18905499126548da61450628682 to before b7f0544d86d439cb946515d2ef6a0a75e8626710Affected

LinuxLinux

5.15Affected
before 5.15Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.114 through 6.12.*Not affected
6.18.34 through 6.18.*Not affected
7.0.11 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.