CVE-2026-64077
Received Received - Intake

Linux Kernel Netfilter ebtables Two-Stage Removal Vulnerability

Publication date: 2026-07-19

Last updated on: 2026-07-19

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: move to two-stage removal scheme Like previous patches for x_tables, follow same pattern in ebtables. We can't reuse xt helpers: ebt_table struct layout is incompatible. table->ops assignment is now done while still holding the ebt mutex to make sure we never expose partially-filled table struct.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-19
Last Modified
2026-07-19
Generated
2026-07-20
AI Q&A
2026-07-19
EPSS Evaluated
N/A
NVD
CVE-2026-64077
EUVD
EUVD-2026-45650

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
netfilter ebtables *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves a flaw in the Linux kernel's ebtables component, specifically related to how table operations are handled during removal. The issue arises because the ebt_table struct layout is incompatible with existing x_tables helpers, requiring a two-stage removal scheme similar to previous fixes for x_tables. The vulnerability could allow partial exposure of table structures if not properly synchronized.

Detection Guidance

This vulnerability is specific to the Linux kernel's ebtables component and relates to a change in the removal scheme. Detection requires checking the kernel version and ebtables implementation for the described two-stage removal pattern. No direct commands are provided in the context to detect this issue.

Impact Analysis

This vulnerability may allow attackers to manipulate network filtering rules in a way that exposes partially filled table structures. This could lead to unexpected network behavior, bypassing intended security controls, or causing system instability if exploited.

Mitigation Strategies

Update the Linux kernel to the latest stable version that includes the patch for this vulnerability. Monitor official Linux kernel security advisories for updates.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64077. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart