Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-64078

Gravedad CVSS v3.1:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
19/07/2026
Última modificación:
20/07/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> netfilter: x_tables: add and use xtables_unregister_table_exit<br /> <br /> Previous change added xtables_unregister_table_pre_exit to detach the<br /> table from the packetpath and to unlink it from the active table list.<br /> In case of rmmod, userspace that is doing set/getsockopt for this table<br /> will not be able to re-instantiate the table:<br /> 1. The larval table has been removed already<br /> 2. existing instantiated table is no longer on the xt pernet table list.<br /> <br /> This adds the second stage helper:<br /> <br /> unlink the table from the dying list, free the hook ops (if any) and do<br /> the audit notification. It replaces xt_unregister_table().