Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64079

In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: allocate hook ops while under mutex arp/ip(6)t_register_table() add the table to the per-netns list via xt_register_table() before allocating the per-netns hook ops copy via kmemdup_array(). This leaves a window where the table is visible in the list with ops=NULL. If the pernet exit happens runs concurrently the pre_exit callback finds the table via xt_find_table() and passes the NULL ops pointer to nf_
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:cf21cdb5a8c64996fc651b15a33e5648a2275911f33cfea5b02ce51b622e5773
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["include/linux/netfilter/x_tables.h","net/ipv4/netfilter/arp_tables.c","net/ipv4/netfilter/ip_tables.c","net/ipv6/netfilter/ip6_tables.c","net/netfilter/x_tables.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.13"},{"lessThan":"5.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"7.0.*","status":"unaffected","version":"7.0.11","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.1…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:caa66682790f45e8e99c80dd39075d3a2c30bca8a59049e401fb5803dfa5ff7c · sha256:b9bbd1cdfad921ba… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["include/linux/netfilter/x_tables.h","net/ipv4/netfilter/arp_tables.c","net/ipv4/netfilter/ip_tables.c","net/ipv6/netfilter/ip6_tables.c","net/netfilter/x_tables.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"2f92c5f923979f37ab1d5445381e4b8378a196cc","status":"affected","version":"ae689334225ff0e4ef112459ecd24aea932c2b00","versionType":"git"},{"lessThan":"b62eb8dcf2c47d4d676a434efbd57c4f776f7829","status":"affected","version":"ae689334225ff0e4ef112459ecd24aea…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:caa66682790f45e8e99c80dd39075d3a2c30bca8a59049e401fb5803dfa5ff7c · sha256:b9bbd1cdfad921ba… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["include/linux/netfilter/x_tables.h","net/ipv4/netfilter/arp_tables.c","net/ipv4/netfilter/ip_tables.c","net/ipv6/netfilter/ip6_tables.c","net/netfilter/x_tables.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.13"},{"lessThan":"5.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"7.0.*","status":"unaffected","version":"7.0.11","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.1…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:caa66682790f45e8e99c80dd39075d3a2c30bca8a59049e401fb5803dfa5ff7c · sha256:b9bbd1cdfad921ba… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["include/linux/netfilter/x_tables.h","net/ipv4/netfilter/arp_tables.c","net/ipv4/netfilter/ip_tables.c","net/ipv6/netfilter/ip6_tables.c","net/netfilter/x_tables.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"2f92c5f923979f37ab1d5445381e4b8378a196cc","status":"affected","version":"ae689334225ff0e4ef112459ecd24aea932c2b00","versionType":"git"},{"lessThan":"b62eb8dcf2c47d4d676a434efbd57c4f776f7829","status":"affected","version":"ae689334225ff0e4ef112459ecd24aea…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:caa66682790f45e8e99c80dd39075d3a2c30bca8a59049e401fb5803dfa5ff7c · sha256:b9bbd1cdfad921ba… · /containers/cna/affected/0

Source references

2 source assertions
{"url":"https://git.kernel.org/stable/c/2f92c5f923979f37ab1d5445381e4b8378a196cc"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:caa66682790f45e8e99c80dd39075d3a2c30bca8a59049e401fb5803dfa5ff7c · sha256:b9bbd1cdfad921ba… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/b62eb8dcf2c47d4d676a434efbd57c4f776f7829"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:caa66682790f45e8e99c80dd39075d3a2c30bca8a59049e401fb5803dfa5ff7c · sha256:b9bbd1cdfad921ba… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer