CVE-2026-64078
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
19/07/2026
Last modified:
20/07/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
netfilter: x_tables: add and use xtables_unregister_table_exit<br />
<br />
Previous change added xtables_unregister_table_pre_exit to detach the<br />
table from the packetpath and to unlink it from the active table list.<br />
In case of rmmod, userspace that is doing set/getsockopt for this table<br />
will not be able to re-instantiate the table:<br />
1. The larval table has been removed already<br />
2. existing instantiated table is no longer on the xt pernet table list.<br />
<br />
This adds the second stage helper:<br />
<br />
unlink the table from the dying list, free the hook ops (if any) and do<br />
the audit notification. It replaces xt_unregister_table().
Impact
Base Score 3.x
7.80
Severity 3.x
HIGH