CVE-2026-64077

Analyzed Analyzed - Analysis Complete

Linux Kernel Netfilter ebtables Two-Stage Removal Vulnerability

Publication date: 2026-07-19

Last updated on: 2026-09-03

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: move to two-stage removal scheme Like previous patches for x_tables, follow same pattern in ebtables. We can't reuse xt helpers: ebt_table struct layout is incompatible. table->ops assignment is now done while still holding the ebt mutex to make sure we never expose partially-filled table struct.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-19

Last Modified

2026-09-03

Generated

2026-09-19

AI Q&A

2026-07-19

EPSS Evaluated

2026-09-15

NVD

CVE-2026-64077

EUVD

EUVD-2026-45650

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	From 6.19 (inc) to 7.0.11 (exc)
linux	linux_kernel	From 5.15 (inc) to 6.18.34 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability involves a flaw in the Linux kernel's ebtables component, specifically related to how table operations are handled during removal. The issue arises because the ebt_table struct layout is incompatible with existing x_tables helpers, requiring a two-stage removal scheme similar to previous fixes for x_tables. The vulnerability could allow partial exposure of table structures if not properly synchronized.

Detection Guidance

This vulnerability is specific to the Linux kernel's ebtables component and relates to a change in the removal scheme. Detection requires checking the kernel version and ebtables implementation for the described two-stage removal pattern. No direct commands are provided in the context to detect this issue.

Impact Analysis

This vulnerability may allow attackers to manipulate network filtering rules in a way that exposes partially filled table structures. This could lead to unexpected network behavior, bypassing intended security controls, or causing system instability if exploited.

Compliance Impact

The provided CVE data does not specify any direct impact on compliance with standards like GDPR or HIPAA. The vulnerability relates to a Linux kernel issue in ebtables, which may affect network filtering but lacks details on data protection or privacy implications.

Mitigation Strategies

Update the Linux kernel to the latest stable version that includes the patch for this vulnerability. Monitor official Linux kernel security advisories for updates.

Hi! I’m here to help you understand CVE-2026-64077. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70