CVE-2026-72349
Full vulnerability record from the local CVENow database.
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() On links faster than ~34 Gbps, where byte rate may exceed 2^32-1 (~ 4.3 GBps), the comparison result becomes incorrect because the truncated value no longer reflects the actual estimator rate. Fix by changing the local variables to u64.
Severity
Not scored
CVSS score
Not available
Vulnerability status
Received
Source identifier
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published
2026-08-15 06:22:08.297000
Last modified
2026-11-06 17:19:43.360000
View original CVE JSON
{
"id": "CVE-2026-72349",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2026-08-15T06:22:08.297",
"lastModified": "2026-11-06T17:19:43.360",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()\n\nOn links faster than ~34 Gbps, where byte rate may exceed 2^32-1\n(~ 4.3 GBps), the comparison result becomes incorrect because the\ntruncated value no longer reflects the actual estimator rate.\n\nFix by changing the local variables to u64."
}
],
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "unaffected",
"programFiles": [
"net/netfilter/xt_rateest.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "1c0d32fde5bdf1184bc274f864c09799278a1114",
"lessThan": "77e9ba358d63fe2eb03c90d29ea85651d95cf2e6",
"versionType": "git",
"status": "affected"
},
{
"version": "1c0d32fde5bdf1184bc274f864c09799278a1114",
"lessThan": "a3ba938f45cb00f6bf49d3aa3647df9b017f5f08",
"versionType": "git",
"status": "affected"
},
{
"version": "1c0d32fde5bdf1184bc274f864c09799278a1114",
"lessThan": "bab305dd769d78074adca73505cc2509e1206bf2",
"versionType": "git",
"status": "affected"
},
{
"version": "1c0d32fde5bdf1184bc274f864c09799278a1114",
"lessThan": "5da915fc159c6b4091669447588e520183969cca",
"versionType": "git",
"status": "affected"
},
{
"version": "1c0d32fde5bdf1184bc274f864c09799278a1114",
"lessThan": "d5cc4c12a4b90bf099199c3c49ecda7e694f2a2b",
"versionType": "git",
"status": "affected"
},
{
"version": "1c0d32fde5bdf1184bc274f864c09799278a1114",
"lessThan": "e702f6dd5d21e331f55fd9168c0210542008546d",
"versionType": "git",
"status": "affected"
},
{
"version": "1c0d32fde5bdf1184bc274f864c09799278a1114",
"lessThan": "905a927b2e6fec7b174e9e5644d271047b61378f",
"versionType": "git",
"status": "affected"
},
{
"version": "1c0d32fde5bdf1184bc274f864c09799278a1114",
"lessThan": "444853cd438201007da5359821adcc2995655ab1",
"versionType": "git",
"status": "affected"
}
]
},
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "affected",
"programFiles": [
"net/netfilter/xt_rateest.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "4.10",
"status": "affected"
},
{
"version": "0",
"lessThan": "4.10",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.10.261",
"lessThanOrEqual": "5.10.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.15.212",
"lessThanOrEqual": "5.15.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.1.178",
"lessThanOrEqual": "6.1.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.6.145",
"lessThanOrEqual": "6.6.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.12.97",
"lessThanOrEqual": "6.12.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.18.40",
"lessThanOrEqual": "6.18.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.1.5",
"lessThanOrEqual": "7.1.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.2",
"lessThanOrEqual": "*",
"versionType": "original_commit_for_fix",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-11-06T16:54:46.661715Z",
"id": "CVE-2026-72349",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"references": [
{
"url": "https://git.kernel.org/stable/c/444853cd438201007da5359821adcc2995655ab1",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/5da915fc159c6b4091669447588e520183969cca",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/77e9ba358d63fe2eb03c90d29ea85651d95cf2e6",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/905a927b2e6fec7b174e9e5644d271047b61378f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/a3ba938f45cb00f6bf49d3aa3647df9b017f5f08",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/bab305dd769d78074adca73505cc2509e1206bf2",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/d5cc4c12a4b90bf099199c3c49ecda7e694f2a2b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/e702f6dd5d21e331f55fd9168c0210542008546d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
]
}