CVE-2026-72349

CVE-2026-72349

published August 15, 2026

CVSS
—
EPSS
0%
Percentile
11.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()

On links faster than ~34 Gbps, where byte rate may exceed 2^32-1

(~ 4.3 GBps), the comparison result becomes incorrect because the

truncated value no longer reflects the actual estimator rate.

Fix by changing the local variables to u64.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00220 · 11.8th percentile
Published
2026-08-15T10:22Z
References (8)
EPSS history
Timeline
  • 15 AUG 05:55Z
    netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()
    cvelistv5