CVE-2026-74564

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the netfilter module where the XT HASHLIMIT RATE MATCH flag mode alters the semantics of the dsthash ent structure used for hashtable entries. This structure contains a union area with a layout that varies based on the rate match mode. If two or more different rules referring to the same hashtable request the XT HASHLIMIT RATE MATCH mode flag without proper validation in the .checkentry path, uninitialized access to the burst field within the union may occur. Additionally, the use of the XT HASHLIMIT RATE MATCH mode flag is problematic when set by revisions earlier than 3.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.