CVE-2026-72349

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() On links faster than ~34 Gbps, where byte rate may exceed 2^32-1 (~ 4.3 GBps), the comparison result becomes incorrect because the truncated value no longer reflects the actual estimator rate. Fix by changing the local variables to u64.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedAug 15, 2026
First seenAug 15, 2026

How to fix

Update
  • Linux Linux77e9ba358d63fe2eb03c90d29ea85651d95cf2e6, a3ba938f45cb00f6bf49d3aa3647df9b017f5f08, bab305dd769d78074adca73505cc2509e1206bf2, 5da915fc159c6b4091669447588e520183969cca, d5cc4c12a4b90bf099199c3c49ecda7e694f2a2b, e702f6dd5d21e331f55fd9168c0210542008546d, 905a927b2e6fec7b174e9e5644d271047b61378f, 444853cd438201007da5359821adcc2995655ab1 or later

Affected products

ProductAffected versionsFixed in
Linux Linux1c0d32fde5bdf1184bc274f864c09799278a1114 ≤ v < 77e9ba358d63fe2eb03c90d29ea85651d95cf2e6, 1c0d32fde5bdf1184bc274f864c09799278a1114 ≤ v < a3ba938f45cb00f6bf49d3aa3647df9b017f5f08, 1c0d32fde5bdf1184bc274f864c09799278a1114 ≤ v < bab305dd769d78074adca73505cc2509e1206bf2, 1c0d32fde5bdf1184bc274f864c09799278a1114 ≤ v < 5da915fc159c6b4091669447588e520183969cca, 1c0d32fde5bdf1184bc274f864c09799278a1114 ≤ v < d5cc4c12a4b90bf099199c3c49ecda7e694f2a2b, 1c0d32fde5bdf1184bc274f864c09799278a1114 ≤ v < e702f6dd5d21e331f55fd9168c0210542008546d, 1c0d32fde5bdf1184bc274f864c09799278a1114 ≤ v < 905a927b2e6fec7b174e9e5644d271047b61378f, 1c0d32fde5bdf1184bc274f864c09799278a1114 ≤ v < 444853cd438201007da5359821adcc2995655ab1, 4.1077e9ba358d63fe2eb03c90d29ea85651d95cf2e6, a3ba938f45cb00f6bf49d3aa3647df9b017f5f08, bab305dd769d78074adca73505cc2509e1206bf2, 5da915fc159c6b4091669447588e520183969cca, d5cc4c12a4b90bf099199c3c49ecda7e694f2a2b, e702f6dd5d21e331f55fd9168c0210542008546d, 905a927b2e6fec7b174e9e5644d271047b61378f, 444853cd438201007da5359821adcc2995655ab1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-72349 · Linux · Dark Radar