CVE-2026-64077: netfilter: ebtables: move to two-stage removal scheme
Published Jul 19, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
netfilter: ebtables: move to two-stage removal scheme
Like previous patches for xtables, follow same pattern in ebtables. We can't reuse xt helpers: ebttable struct layout is incompatible.
table->ops assignment is now done while still holding the ebt mutex to make sure we never expose partially-filled table struct.
Affected Software
5 affected components
Linux Linux kernel>=5.15<6.18.34
Linux Linux kernel>=6.19<7.0.11
Linux Linux kernel=7.1-rc1
Linux Linux kernel=7.1-rc2
Linux Linux kernel=7.1-rc3
Remediation
Event History
Jul 19, 2026
CVE Published
via MITRE·03:39 PM
Data Sourced
via MITRE·03:39 PM
DescriptionSeverity
Data Sourced
via NVD·04:17 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
Exploitation requires local access and low privileges. No user interaction is required.
2
What could a successful exploit allow?
The CVSS vector rates confidentiality, integrity, and availability impact as high.
3
What should administrators do if their systems use the affected kernel component?
Apply the available Linux kernel patch. The provided references identify stable kernel commits containing the fix.