CVE-2026-64077

Source
https://cve.org/CVERecord?id=CVE-2026-64077
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64077.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-64077
Downstream
AZL (1)
BELL (1)
DEBIAN (1)
OESA (1)
ROOT (3)
UBUNTU (1)
Published
2026-07-19T15:39:50Z
Modified
2026-10-22T02:48:54Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
netfilter: ebtables: move to two-stage removal scheme
Details

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ebtables: move to two-stage removal scheme

Like previous patches for x_tables, follow same pattern in ebtables. We can't reuse xt helpers: ebt_table struct layout is incompatible.

table->ops assignment is now done while still holding the ebt mutex to make sure we never expose partially-filled table struct.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64077.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
87663c39f898b18905499126548da61450628682
Fixed
6fe4c808b6cdb405ed64ea6e740d557bba3d7745
Fixed
f34e5a674afe743d1af80684d64b511f40a5c35d
Fixed
739d5dac7b2da44a756aa4d758ee3f1ccf5a27f1
Fixed
ef395579a7631a06d61969fc712eb80402231b89
Fixed
b7f0544d86d439cb946515d2ef6a0a75e8626710

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64077.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.15.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.114
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.34
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.0.11

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64077.json"