CVE-2026-64077

A flaw was found in the Linux kernel's netfilter ebtables component. A concurrency issue exists during the two-stage removal scheme where the table->ops assignment could expose a partially-filled table structure if the ebt mutex is not held. This could lead to unpredictable system behavior.

This vulnerability is rated as Moderate severity because exploitation is restricted to local attackers with privileges to configure bridge firewalling, and the primary impact is denial of service through kernel instability or crash rather than arbitrary code execution. The flaw stems from improper locking when unregistering Ethernet bridge filter tables, exposing incomplete data structures to concurrent operations. Because the underlying code sequence was introduced in newer kernel branches, older Red Hat Enterprise Linux releases are not affected, and typical enterprise deployments increasingly rely on nftables rather than legacy bridge filtering.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.