CVE-2026-74564

In the Linux kernel, the following vulnerability has been resolved:

netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH

The XT_HASHLIMIT_RATE_MATCH flag mode changes the semantics of the

dsthash_ent structure which represents an entry in the hashtable. There

is a union area which uses a different layout to express the rate match

mode.

Update .checkentry path to validate the XT_HASHLIMIT_RATE_MATCH mode

flag is requested by two or more different rules that refer to the same

hashtable. Otherwise, uninitialized access to the burst field in the

union is possible.

Reject the use of the XT_HASHLIMIT_RATE_MATCH mode flag if set on by

revision less than 3 too.