CVE-2026-64076 Details
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: eb_tables: close module init race sashiko reports for unrelated patch: Does the core ebtables initialization in ebtables.c suffer from a similar race? Once nf_register_sockopt() completes, the sockopts are exposed globally. sockopt has to be registered last, just like in ip/ip6/arptables.
A race condition vulnerability has been identified in the Linux kernel's netfilter bridge ebtables module. This issue arises during the module's initialization process, where the registration of socket options is not properly synchronized. As a result, the socket options can be exposed globally before they are fully registered, potentially leading to inconsistent behavior or exploitation. The vulnerability affects the Linux kernel stable tree.
The vulnerability has been addressed in a patch that reorders the initialization process, ensuring that socket options are registered last, similar to the handling in iptables and arptables. Users should apply this patch to mitigate the vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/02d999dc69b3918dba2414932b5d95f1f75c76cb | kernel.org | Patch |
| https://git.kernel.org/stable/c/27414ff1b287ea9a2a11675149ec28e05539f3cc | kernel.org | Patch |
| https://git.kernel.org/stable/c/c647e2a21bbbaceda6cdb8a44a56f44d231dc4b4 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.13, < 6.18.34 >= 6.19, < 7.0.11 7.1 rc1 7.1 rc2 7.1 rc3 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 3, 2026 | Initial Analysis | [email protected] |
| Jul 20, 2026 | CVE Modified | kernel.org |
| Jul 19, 2026 | New CVE Received | kernel.org |