Answer in brief
CVE-2026-64078 records a Unknown severity vulnerability in netfilter: x_tables: add and use xtables_unregister_table_exit. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=fdacd57c79b79a03c7ca88f706ad9fb7b46831c1 <86ee5bc9c0f0e652e19f395675a432de11b75514 || >=fdacd57c79b79a03c7ca88f706ad9fb7b46831c1 <8026e5163cca1d1db436c7bfb89ddea8b5e8c2cf || >=fdacd57c79b79a03c7ca88f706ad9fb7b46831c1 <b4597d5fd7d2f8cebfffd40dffb5e003cc78964c | 86ee5bc9c0f0e652e19f395675a432de11b75514, 8026e5163cca1d1db436c7bfb89ddea8b5e8c2cf, b4597d5fd7d2f8cebfffd40dffb5e003cc78964c |
| Linux/Linuxgeneric | 5.15 | Not reported |
Published upstream
Jul 19, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: add and use xtables_unregister_table_exit Previous change added xtables_unregister_table_pre_exit to detach the table from the packetpath and to unlink it from the active table list. In case of rmmod, userspace that is doing set/getsockopt for this table will not be able to re-instantiate the table: 1. The larval table has been removed already 2. existing instantiated table is no longer on the xt pernet table list. This adds the second stage helper: unlink the table from the dying list, free the hook ops (if any) and do the audit notification. It replaces xt_unregister_table().
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-64078 records a Unknown severity vulnerability in netfilter: x_tables: add and use xtables_unregister_table_exit. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=fdacd57c79b79a03c7ca88f706ad9fb7b46831c1 <86ee5bc9c0f0e652e19f395675a432de11b75514 || >=fdacd57c79b79a03c7ca88f706ad9fb7b46831c1 <8026e5163cca1d1db436c7bfb89ddea8b5e8c2cf || >=fdacd57c79b79a03c7ca88f706ad9fb7b46831c1 <b4597d5fd7d2f8cebfffd40dffb5e003cc78964c | 86ee5bc9c0f0e652e19f395675a432de11b75514, 8026e5163cca1d1db436c7bfb89ddea8b5e8c2cf, b4597d5fd7d2f8cebfffd40dffb5e003cc78964c |
| Linux/Linuxgeneric | 5.15 | Not reported |
Published upstream
Jul 19, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: add and use xtables_unregister_table_exit Previous change added xtables_unregister_table_pre_exit to detach the table from the packetpath and to unlink it from the active table list. In case of rmmod, userspace that is doing set/getsockopt for this table will not be able to re-instantiate the table: 1. The larval table has been removed already 2. existing instantiated table is no longer on the xt pernet table list. This adds the second stage helper: unlink the table from the dying list, free the hook ops (if any) and do the audit notification. It replaces xt_unregister_table().
Quoted source text, attributed separately from HOL analysis.