AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-72349

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's netfilter component, specifically in the xt_rateest module, where improper handling of high-speed network links can lead to incorrect byte rate estimations due to u64 truncation. This flaw can result in mismanagement of network traffic on links exceeding approximately 34 Gbps, potentially impacting performance and security measures reliant on accurate rate estimation. Organizations utilizing high-speed Linux-based networking solutions should prioritize applying the fix to mitigate potential disruptions.

CVE
CVE-2026-72349
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() On links faster than ~34 Gbps, where byte rate may exceed 2^32-1 (~ 4.3 GBps), the comparison result becomes incorrect because the truncated value no longer reflects the actual estimator rate. Fix by changing the local variables to u64.