CVE-2026-72349

Impact

In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() On links faster than ~34 Gbps, where byte rate may exceed 2^32-1 (~ 4.3 GBps), the comparison result becomes incorrect because the truncated value no longer reflects the actual estimator rate. Fix by changing the local variables to u64.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

References

• NVD record
• CVE.org record
• https://git.kernel.org/stable/c/444853cd438201007da5359821adcc2995655ab1
• https://git.kernel.org/stable/c/5da915fc159c6b4091669447588e520183969cca
• https://git.kernel.org/stable/c/77e9ba358d63fe2eb03c90d29ea85651d95cf2e6
• https://git.kernel.org/stable/c/905a927b2e6fec7b174e9e5644d271047b61378f
• https://git.kernel.org/stable/c/a3ba938f45cb00f6bf49d3aa3647df9b017f5f08
• https://git.kernel.org/stable/c/bab305dd769d78074adca73505cc2509e1206bf2
• https://git.kernel.org/stable/c/d5cc4c12a4b90bf099199c3c49ecda7e694f2a2b
• https://git.kernel.org/stable/c/e702f6dd5d21e331f55fd9168c0210542008546d