VULNERABILITY INTELLIGENCE
CVE-2026-72349
EPSS probability0.22%
CISA KEVNot currently listed
Published2026-08-15
Last modified2026-08-17
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() On links faster than ~34 Gbps, where byte rate may exceed 2^32-1 (~ 4.3 GBps), the comparison result becomes incorrect because the truncated value no longer reflects the actual estimator rate. Fix by changing the local variables to u64.