High 7.8Published Jul 19, 2026

CVE-2026-64077netfilter: ebtables: move to two-stage removal scheme

Updated under an hour ago (Oct 27, 2026, 3:40 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: move to two-stage removal scheme Like previous patches for x_tables, follow same pattern in ebtables. We can't reuse xt helpers: ebt_table struct layout is incompatible. table->ops assignment is now done while still holding the ebt mutex to make sure we never expose partially-filled table struct.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-362
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 21, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	87663c39f898b18905499126548da61450628682 builds before 6fe4c808b6cdb405ed64ea6e740d557bba3d7745; from 87663c39f898b18905499126548da61450628682 before f34e5a674afe743d1af80684d64b511f40a5c35d; 87663c39f898b18905499126548da61450628682 builds before 739d5dac7b2da44a756aa4d758ee3f1ccf5a27f1; from 87663c39f898b18905499126548da61450628682 before ef395579a7631a06d61969fc712eb80402231b89; from 87663c39f898b18905499126548da61450628682 before b7f0544d86d439cb946515d2ef6a0a75e8626710	CNA record
linux linux_kernel linux:linux_kernel	from 5.15 before 6.18.34; from 6.19 before 7.0.11; 7.1; 7.1; 7.1	NVD

References

References

https://git.kernel.org/stable/c/6fe4c808b6cdb405ed64ea6e740d557bba3d7745
https://git.kernel.org/stable/c/f34e5a674afe743d1af80684d64b511f40a5c35d
https://git.kernel.org/stable/c/739d5dac7b2da44a756aa4d758ee3f1ccf5a27f1	patch
https://git.kernel.org/stable/c/ef395579a7631a06d61969fc712eb80402231b89	patch
https://git.kernel.org/stable/c/b7f0544d86d439cb946515d2ef6a0a75e8626710	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.