SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-74564

HIGH · CVSS 7.1 EPSS 0.12%

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

A vulnerability in the Linux kernel's netfilter component affects the xt_hashlimit feature, specifically related to the XT_HASHLIMIT_RATE_MATCH flag. This flaw can lead to uninitialized access to the burst field in the dsthash_ent structure, potentially allowing unauthorized access or manipulation of network traffic. System administrators and organizations utilizing Linux-based systems with netfilter configurations should prioritize applying updates to mitigate this risk.

CVE
CVE-2026-74564
Severity
HIGH
CVSS
7.1
EPSS
0.12%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH The XT_HASHLIMIT_RATE_MATCH flag mode changes the semantics of the dsthash_ent structure which represents an entry in the hashtable. There is a union area which uses a different layout to express the rate match mode. Update .checkentry path to validate the XT_HASHLIMIT_RATE_MATCH mode flag is requested by two or more different rules that refer to the same hashtable. Otherwise, uninitialized access to the burst field in the union is possible. Reject the use of the XT_HASHLIMIT_RATE_MATCH mode flag if set on by revision less than 3 too.