Vulnerability in Linux

CVE-2026-72349

In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() On links faster than ~34 Gbps, where byte rate may exceed 2^32-1 (~ 4.3 GBps), the comparison result becomes incorrect because the truncated value no longer reflects the actual estimator rate. Fix by changing the local variables to u64.

Affected products

  • Linux — versions 1c0d32fde5bdf1184bc274f864c09799278a1114, 4.10, 0

References