← All Advisories
Reported from OT-Advisories.com as of

CVE-2026-74564

Last refreshed2026-10-17

Status: UPDATED  |  Advisory ID: CVE-2026-74564

Key Details

CVECVE-2026-74564
CVSS Score / Version
7.1 (High) / CVSS v3.1
Updated2026-10-16
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is none.
Affected products
Linux Kernel

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
LinuxLinux Kernel
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

In the Linux kernel, the following vulnerability has been resolved:

netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH

The XT_HASHLIMIT_RATE_MATCH flag mode changes the semantics of the

dsthash_ent structure which represents an entry in the hashtable. There

is a union area which uses a different layout to express the rate match

mode.

Update .checkentry path to validate the XT_HASHLIMIT_RATE_MATCH mode

flag is requested by two or more different rules that refer to the same

hashtable. Otherwise, uninitialized access to the burst field in the

union is possible.

Reject the use of the XT_HASHLIMIT_RATE_MATCH mode flag if set on by

revision less than 3 too. (NVD)

What to Do

Monitor Linux's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-74564
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-74564

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.