Riskcovery

CVE-2026-64078

netfilter: x_tables: add and use xtables_unregister_table_exit

State
Published
Severity
7.8 High
Published
Jul 19, 2026
Updated
Aug 5, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: x_tables: add and use xtables_unregister_table_exit

Previous change added xtables_unregister_table_pre_exit to detach the table from the packetpath and to unlink it from the active table list. In case of rmmod, userspace that is doing set/getsockopt for this table will not be able to re-instantiate the table: 1. The larval table has been removed already 2. existing instantiated table is no longer on the xt pernet table list.

This adds the second stage helper:

unlink the table from the dying list, free the hook ops (if any) and do the audit notification. It replaces xt_unregister_table().

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • fdacd57c79b79a03c7ca88f706ad9fb7b46831c1 to before 86ee5bc9c0f0e652e19f395675a432de11b75514Affected
  • fdacd57c79b79a03c7ca88f706ad9fb7b46831c1 to before 8026e5163cca1d1db436c7bfb89ddea8b5e8c2cfAffected
  • fdacd57c79b79a03c7ca88f706ad9fb7b46831c1 to before b4597d5fd7d2f8cebfffd40dffb5e003cc78964cAffected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 6.18.34 through 6.18.*Not affected
  • 7.0.11 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.