CVE-2026-64077

Summary

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ebtables: move to two-stage removal scheme

Like previous patches for x_tables, follow same pattern in ebtables. We can't reuse xt helpers: ebt_table struct layout is incompatible.

table->ops assignment is now done while still holding the ebt mutex to make sure we never expose partially-filled table struct.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux87663c39f898b18905499126548da61450628682 < 739d5dac7b2da44a756aa4d758ee3f1ccf5a27f1affected
LinuxLinux87663c39f898b18905499126548da61450628682 < ef395579a7631a06d61969fc712eb80402231b89affected
LinuxLinux87663c39f898b18905499126548da61450628682 < b7f0544d86d439cb946515d2ef6a0a75e8626710affected
LinuxLinux5.15affected
LinuxLinux0 < 5.15unaffected
LinuxLinux6.18.34 <= 6.18.*unaffected
LinuxLinux7.0.11 <= 7.0.*unaffected
LinuxLinux7.1 <= *unaffected

Weaknesses

References