PT-2026-61395 · Linux+1 · Linux Kernel+1

CVE-2026-64078

·

Published

2026-07-19

·

Updated

2026-09-07

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the netfilter x tables component where the removal of a table via rmmod prevents userspace from re-instantiating the table during set/getsockopt operations. This occurs because the larval table is removed and the instantiated table is no longer present on the xt pernet table list. The fix introduces xtables unregister table exit() to properly unlink the table from the dying list, free hook operations, and perform audit notifications, replacing the xt unregister table() function.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

AZL-92763
CVE-2026-64078
USN-8593-1
USN-8603-1
USN-8618-1
USN-8663-1
USN-8664-1
USN-8728-1

Affected Products

Linux Kernel
Ubuntu