CVE-2026-64076: netfilter: bridge: eb_tables: close module init race
Published Jul 19, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
netfilter: bridge: ebtables: close module init race
sashiko reports for unrelated patch: Does the core ebtables initialization in ebtables.c suffer from a similar race? Once nfregistersockopt() completes, the sockopts are exposed globally.
sockopt has to be registered last, just like in ip/ip6/arptables.
Affected Software
6 affected components
Linux Linux kernel
Linux Linux kernel>=5.13<6.18.34
Linux Linux kernel>=6.19<7.0.11
Linux Linux kernel=7.1-rc1
Linux Linux kernel=7.1-rc2
Linux Linux kernel=7.1-rc3
Remediation
Event History
Jul 19, 2026
CVE Published
via MITRE·03:39 PM
Data Sourced
via MITRE·03:39 PM
DescriptionSeverity
Data Sourced
via NVD·04:17 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates local access and low privileges are required. No user interaction is required.
2
What security impact could successful exploitation have?
The CVSS vector rates confidentiality, integrity, and availability impacts as high. The vulnerability is scoped to the vulnerable system.
3
What is the immediate remediation?
Apply an available patch for the Linux kernel. The supplied stable kernel references identify patches for this issue.