https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 02:55:54 +0000 https://vulnerability.circl.lu/vuln/cve-2026-74564 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH</p> <p>The XT_HASHLIMIT_RATE_MATCH flag mode changes the semantics of the dsthash_ent structure which represents an entry in the hashtable. There is a union area which uses a different layout to express the rate match mode.</p> <p>Update .checkentry path to validate the XT_HASHLIMIT_RATE_MATCH mode flag is requested by two or more different rules that refer to the same hashtable. Otherwise, uninitialized access to the burst field in the union is possible.</p> <p>Reject the use of the XT_HASHLIMIT_RATE_MATCH mode flag if set on by revision less than 3 too.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH</p> <p>The XT_HASHLIMIT_RATE_MATCH flag mode changes the semantics of the dsthash_ent structure which represents an entry in the hashtable. There is a union area which uses a different layout to express the rate match mode.</p> <p>Update .checkentry path to validate the XT_HASHLIMIT_RATE_MATCH mode flag is requested by two or more different rules that refer to the same hashtable. Otherwise, uninitialized access to the burst field in the union is possible.</p> <p>Reject the use of the XT_HASHLIMIT_RATE_MATCH mode flag if set on by revision less than 3 too.</p> https://vulnerability.circl.lu/vuln/cve-2026-74564