7.1

CVE-2026-74564

netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH

In the Linux kernel, the following vulnerability has been resolved:

netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH

The XT_HASHLIMIT_RATE_MATCH flag mode changes the semantics of the
dsthash_ent structure which represents an entry in the hashtable.  There
is a union area which uses a different layout to express the rate match
mode.

Update .checkentry path to validate the XT_HASHLIMIT_RATE_MATCH mode
flag is requested by two or more different rules that refer to the same
hashtable. Otherwise, uninitialized access to the burst field in the
union is possible.

Reject the use of the XT_HASHLIMIT_RATE_MATCH mode flag if set on by
revision less than 3 too.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version bea74641e3786d51dcf1175527cc1781420961c9
Version < 402befce5854c195058cf4bab7c78ca286068a26
Status affected
Version bea74641e3786d51dcf1175527cc1781420961c9
Version < dee686b5e7f21180538ff719867702f411c8eb5c
Status affected
Version bea74641e3786d51dcf1175527cc1781420961c9
Version < f76ab783e7d8d33e33dd7dfa697297f70d57b0e8
Status affected
Version bea74641e3786d51dcf1175527cc1781420961c9
Version < 24683fea1f06bd3bd2707b99460e859bc6464c22
Status affected
Version bea74641e3786d51dcf1175527cc1781420961c9
Version < 32ec8d4aba2cf22e12bdc28df8c4bd833c195fc0
Status affected
Version bea74641e3786d51dcf1175527cc1781420961c9
Version < d186f77d18bdfb252d401ff992ca3001a6a65a0f
Status affected
Version bea74641e3786d51dcf1175527cc1781420961c9
Version < 06a76334243ccd875a981aa8bb46c0f931ef1e3b
Status affected
Version bea74641e3786d51dcf1175527cc1781420961c9
Version < 305b63e1402267459fdabb183af4527f6799eebf
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.14
Status affected
Version 0
Version < 4.14
Status unaffected
Version <= 5.10.*
Version 5.10.265
Status unaffected
Version <= 5.15.*
Version 5.15.216
Status unaffected
Version <= 6.1.*
Version 6.1.183
Status unaffected
Version <= 6.6.*
Version 6.6.151
Status unaffected
Version <= 6.12.*
Version 6.12.103
Status unaffected
Version <= 6.18.*
Version 6.18.44
Status unaffected
Version <= 7.1.*
Version 7.1.8
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.02
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.1 1.8 5.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/24683fea1f06bd3bd2707b99460e859bc6464c22
https://git.kernel.org/stable/c/32ec8d4aba2cf22e12bdc28df8c4bd833c195fc0
https://git.kernel.org/stable/c/d186f77d18bdfb252d401ff992ca3001a6a65a0f
https://git.kernel.org/stable/c/06a76334243ccd875a981aa8bb46c0f931ef1e3b
https://git.kernel.org/stable/c/305b63e1402267459fdabb183af4527f6799eebf
https://git.kernel.org/stable/c/402befce5854c195058cf4bab7c78ca286068a26
https://git.kernel.org/stable/c/dee686b5e7f21180538ff719867702f411c8eb5c
https://git.kernel.org/stable/c/f76ab783e7d8d33e33dd7dfa697297f70d57b0e8