CVE-2026-64076

A flaw was found in the Linux kernel's Netfilter eb_tables module. A race condition during the module's initialization allows sockopts to be exposed globally before they are fully registered. This could potentially lead to unexpected behavior or security vulnerabilities if exploited by a local attacker.

This vulnerability is rated as Moderate severity because exploitation requires local access and precise timing during module initialization, primarily presenting a denial of service risk without compromising confidentiality or integrity. In Red Hat Enterprise Linux environments, ebtables is a legacy packet-filtering framework that is not loaded by default on standard installations, limiting exposure unless bridge filtering is actively configured. A local attacker with appropriate privileges would need to interact with network socket options during the brief window when the module loads to trigger the race condition.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.