CVE-2026-64077

HighCVSS 7.8/10Last modified Oct 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ebtables: move to two-stage removal scheme

Like previous patches for x_tables, follow same pattern in ebtables. We can't reuse xt helpers: ebt_table struct layout is incompatible.

table->ops assignment is now done while still holding the ebt mutex to make sure we never expose partially-filled table struct.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362

Affected software

VendorProductVersions
LinuxLinux>= 87663c39f898b18905499126548da61450628682, < b37e27f5d5cbb7723644fdf089e28a216d6093ed; >= 87663c39f898b18905499126548da61450628682, < 6fe4c808b6cdb405ed64ea6e740d557bba3d7745; >= 87663c39f898b18905499126548da61450628682, < f34e5a674afe743d1af80684d64b511f40a5c35d; >= 87663c39f898b18905499126548da61450628682, < 739d5dac7b2da44a756aa4d758ee3f1ccf5a27f1; >= 87663c39f898b18905499126548da61450628682, < ef395579a7631a06d61969fc712eb80402231b89; >= 87663c39f898b18905499126548da61450628682, < b7f0544d86d439cb946515d2ef6a0a75e8626710
LinuxLinux5.15

References

Timeline

Published
Jul 19, 2026
Last modified
Oct 30, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-640787.8In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: add and use xtables_unregister_table_exit PreviouCVE-2026-640795.5In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: allocate hook ops while under mutex arp/ip(6)t_reCVE-2026-64082.7Tanium addressed an information disclosure vulnerability in Tanium Server.CVE-2026-640809.3In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Snapshot notifier callbacks under lock Both notificCVE-2026-640818.4In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Validate framework notification message layout FramCVE-2026-640827.8In the Linux kernel, the following vulnerability has been resolved: riscv: Fix register corruption from uninitialized cregs on error compaCVE-2026-640835.5In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO acCVE-2026-640847.8In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NRCVE-2026-640857.8In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sizedCVE-2026-640867.8In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read bufferCVE-2026-640875.5In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) reject implausible blackbox record_count adm126CVE-2026-640888.8In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix negative tt_buff_len batadv_orig_node::tt_buff_len
CVE-2026-64077: High severity, CVSS 7.8 | Vulnix