CVE-2026-64076

Analyzed Analyzed - Analysis Complete

ebtables Race Condition in Linux Kernel

Publication date: 2026-07-19

Last updated on: 2026-09-03

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: eb_tables: close module init race sashiko reports for unrelated patch: Does the core ebtables initialization in ebtables.c suffer from a similar race? Once nf_register_sockopt() completes, the sockopts are exposed globally. sockopt has to be registered last, just like in ip/ip6/arptables.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-19

Last Modified

2026-09-03

Generated

2026-09-18

AI Q&A

2026-07-19

EPSS Evaluated

2026-09-15

NVD

CVE-2026-64076

EUVD

EUVD-2026-45649

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	From 6.19 (inc) to 7.0.11 (exc)
linux	linux_kernel	From 5.13 (inc) to 6.18.34 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a race condition during the initialization of the ebtables module. The issue occurs because the sockopt registration happens too early, exposing socket options globally before the module is fully initialized. This is similar to a previously reported issue in other table modules like ip/ip6/arptables.

Detection Guidance

This vulnerability involves a race condition in the Linux kernel's ebtables initialization. Detection requires checking kernel logs for related errors or examining the ebtables module for race conditions during initialization. No specific commands are provided in the context.

Impact Analysis

An attacker could exploit this race condition to manipulate socket options before the ebtables module is fully set up, potentially leading to unexpected behavior or unauthorized access to network filtering capabilities.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it pertains to a race condition in the Linux kernel's netfilter bridge module initialization. No evidence suggests data exposure or privacy violations typical of compliance violations.

Mitigation Strategies

Update the Linux kernel to the latest patched version to resolve the netfilter bridge ebtables race condition. Monitor vendor advisories for kernel updates addressing this issue.

Hi! I’m here to help you understand CVE-2026-64076. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70