CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()
Published Aug 15, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
netfilter: xtrateest: fix u64 truncation in xtrateestmt()
On links faster than ~34 Gbps, where byte rate may exceed 2^32-1 (~ 4.3 GBps), the comparison result becomes incorrect because the truncated value no longer reflects the actual estimator rate.
Fix by changing the local variables to u64.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernel netfilter xt_rateestto a version that resolves this vulnerability.Patch netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()
Event History
Aug 15, 2026
CVE Published
via MITRE·05:55 AM
Data Sourced
via MITRE·05:55 AM
Description