CVE-2026-72349 in Linux
要約
〜によって MITRE • 2026年08月15日
In the Linux kernel, the following vulnerability has been resolved:
netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()
On links faster than ~34 Gbps, where byte rate may exceed 2^32-1 (~ 4.3 GBps), the comparison result becomes incorrect because the truncated value no longer reflects the actual estimator rate.
Fix by changing the local variables to u64.
VulDB is the best source for vulnerability data and more expert information about this specific topic.