In the Linux kernel, the following vulnerability has been resolved:

netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()

On links faster than ~34 Gbps, where byte rate may exceed 2^32-1
(~ 4.3 GBps), the comparison result becomes incorrect because the
truncated value no longer reflects the actual estimator rate.

Fix by changing the local variables to u64.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
1c0d32fde5bdf1184bc274f864c09799278a1114 affected < 77e9ba358d63fe2eb03c90d29ea85651d95cf2e6
1c0d32fde5bdf1184bc274f864c09799278a1114 affected < a3ba938f45cb00f6bf49d3aa3647df9b017f5f08
1c0d32fde5bdf1184bc274f864c09799278a1114 affected < bab305dd769d78074adca73505cc2509e1206bf2
1c0d32fde5bdf1184bc274f864c09799278a1114 affected < 5da915fc159c6b4091669447588e520183969cca
1c0d32fde5bdf1184bc274f864c09799278a1114 affected < d5cc4c12a4b90bf099199c3c49ecda7e694f2a2b
1c0d32fde5bdf1184bc274f864c09799278a1114 affected < e702f6dd5d21e331f55fd9168c0210542008546d
1c0d32fde5bdf1184bc274f864c09799278a1114 affected < 905a927b2e6fec7b174e9e5644d271047b61378f
1c0d32fde5bdf1184bc274f864c09799278a1114 affected < 444853cd438201007da5359821adcc2995655ab1
Linux Linux affected
Version Status Constraints
4.10 affected —
0 unaffected < 4.10
5.10.261 unaffected ≤ 5.10.*
5.15.212 unaffected ≤ 5.15.*
6.1.178 unaffected ≤ 6.1.*
6.6.145 unaffected ≤ 6.6.*
6.12.97 unaffected ≤ 6.12.*
6.18.40 unaffected ≤ 6.18.*
7.1.5 unaffected ≤ 7.1.*
7.2-rc3 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/444853cd438201007da5359821adcc2995655ab1 cve-icon cve-icon
https://git.kernel.org/stable/c/5da915fc159c6b4091669447588e520183969cca cve-icon cve-icon
https://git.kernel.org/stable/c/77e9ba358d63fe2eb03c90d29ea85651d95cf2e6 cve-icon cve-icon
https://git.kernel.org/stable/c/905a927b2e6fec7b174e9e5644d271047b61378f cve-icon cve-icon
https://git.kernel.org/stable/c/a3ba938f45cb00f6bf49d3aa3647df9b017f5f08 cve-icon cve-icon
https://git.kernel.org/stable/c/bab305dd769d78074adca73505cc2509e1206bf2 cve-icon cve-icon
https://git.kernel.org/stable/c/d5cc4c12a4b90bf099199c3c49ecda7e694f2a2b cve-icon cve-icon
https://git.kernel.org/stable/c/e702f6dd5d21e331f55fd9168c0210542008546d cve-icon cve-icon
History

Sat, 15 Aug 2026 06:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() On links faster than ~34 Gbps, where byte rate may exceed 2^32-1 (~ 4.3 GBps), the comparison result becomes incorrect because the truncated value no longer reflects the actual estimator rate. Fix by changing the local variables to u64.
Title netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-15T05:55:52.916Z

Reserved: 2026-08-09T03:40:39.921Z

Link: CVE-2026-72349

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:22:08.297

Modified: 2026-08-15T06:22:08.297

Link: CVE-2026-72349

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.