vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-64076

netfilter: bridge: eb_tables: close module init race

HIGH
7.8
CVSS Score
Published: July 19, 2026 at 03:39 PM UTC
Updated: October 21, 2026 at 01:19 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.8
Exploit prediction
EPSS 0.1%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: eb_tables: close module init race sashiko reports for unrelated patch: Does the core ebtables initialization in ebtables.c suffer from a similar race? Once nf_register_sockopt() completes, the sockopts are exposed globally. sockopt has to be registered last, just like in ip/ip6/arptables.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
5.13 ≤ v < 6.18.346.19 ≤ v < 7.0.115b53951cfc85329d29df9d07b1e905f4563546a57.17.1 rc17.1 rc27.1 rc3
Vendor states this is fixed in 02d999dc69b3918dba2414932b5d95f1f75c76cb (fixed)
Vendor states this is fixed in 27414ff1b287ea9a2a11675149ec28e05539f3cc (fixed)
Vendor states this is fixed in c647e2a21bbbaceda6cdb8a44a56f44d231dc4b4 (fixed)
Vendor states this is fixed in 5.13 (unaffected)
Vendor states this is fixed in 6.12.114 (unaffected)
Vendor states this is fixed in 6.18.34 (unaffected)
Vendor states this is fixed in 6.6.160 (unaffected)
Vendor states this is fixed in 7.0.11 (unaffected)
Vendor states this is fixed in 7.1 (unaffected)

References (5)

Patch
Source: cverecord
https://git.kernel.org/stable/c/c647e2a21bbbaceda6cdb8a44a56f44d231dc4b4
Patch
Source: cverecord
https://git.kernel.org/stable/c/02d999dc69b3918dba2414932b5d95f1f75c76cb
Patch
Source: cverecord
https://git.kernel.org/stable/c/27414ff1b287ea9a2a11675149ec28e05539f3cc
Source: cverecord
https://git.kernel.org/stable/c/5fc488f46086d17e8e545d8104ddd95b175de218
Source: cverecord
https://git.kernel.org/stable/c/6bb35bdaabb22fd2d86b601904e928dbaa537941

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.8HIGHLinux
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfoCWE-362

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card