CVE-2026-64079

In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: allocate hook ops while under mutex arp/ip(6)t_register_table() add the table to the per-netns list via xt_register_table() before allocating the per-netns hook ops copy via kmemdup_array(). This leaves a window where the table is visible in the list with ops=NULL. If the pernet exit happens runs concurrently the pre_exit callback finds the table via xt_find_table() and passes the NULL ops pointer to nf_unregister_net_hooks(), causing a NULL dereference: general protection fault in nf_unregister_net_hooks+0xbc/0x150 RIP: nf_unregister_net_hooks (net/netfilter/core.c:613) Call Trace: ipt_unregister_table_pre_exit iptable_mangle_net_pre_exit ops_pre_exit_list cleanup_net Fix by moving the ops allocation into the xtables core so the table is never in the list without valid ops. Also ensure the table is no longer processing packets before its torn down on error unwind. nf_register_net_hooks might have published at least one hook; call synchronize_rcu() if there was an error. audit log register message gets deferred until all operations have passed, this avoids need to emit another ureg message in case of error unwinding. Based on earlier patch by Tristan Madani.

• CWE-476

• https://git.kernel.org/stable/c/2f92c5f923979f37ab1d5445381e4b8378a196ccPatch
• https://git.kernel.org/stable/c/b62eb8dcf2c47d4d676a434efbd57c4f776f7829Patch

Published

Jul 19, 2026

Last Modified

Sep 3, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-64073In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-64074In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-64075In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-64076In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-64077In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-64078In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-6408Tanium addressed an information disclosure vulnerability in …2.7
• CVE-2026-64080In the Linux kernel, the following vulnerability has been re…9.3
• CVE-2026-64081In the Linux kernel, the following vulnerability has been re…8.4
• CVE-2026-64082In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-64083In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-64084In the Linux kernel, the following vulnerability has been re…7.8