{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-72349", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-09T03:40:39.921Z", "datePublished": "2026-08-15T05:55:52.916Z", "dateUpdated": "2026-08-17T05:12:58.965Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-17T05:12:58.965Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()\n\nOn links faster than ~34 Gbps, where byte rate may exceed 2^32-1\n(~ 4.3 GBps), the comparison result becomes incorrect because the\ntruncated value no longer reflects the actual estimator rate.\n\nFix by changing the local variables to u64."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/netfilter/xt_rateest.c"], "versions": [{"version": "1c0d32fde5bdf1184bc274f864c09799278a1114", "lessThan": "77e9ba358d63fe2eb03c90d29ea85651d95cf2e6", "status": "affected", "versionType": "git"}, {"version": "1c0d32fde5bdf1184bc274f864c09799278a1114", "lessThan": "a3ba938f45cb00f6bf49d3aa3647df9b017f5f08", "status": "affected", "versionType": "git"}, {"version": "1c0d32fde5bdf1184bc274f864c09799278a1114", "lessThan": "bab305dd769d78074adca73505cc2509e1206bf2", "status": "affected", "versionType": "git"}, {"version": "1c0d32fde5bdf1184bc274f864c09799278a1114", "lessThan": "5da915fc159c6b4091669447588e520183969cca", "status": "affected", "versionType": "git"}, {"version": "1c0d32fde5bdf1184bc274f864c09799278a1114", "lessThan": "d5cc4c12a4b90bf099199c3c49ecda7e694f2a2b", "status": "affected", "versionType": "git"}, {"version": "1c0d32fde5bdf1184bc274f864c09799278a1114", "lessThan": "e702f6dd5d21e331f55fd9168c0210542008546d", "status": "affected", "versionType": "git"}, {"version": "1c0d32fde5bdf1184bc274f864c09799278a1114", "lessThan": "905a927b2e6fec7b174e9e5644d271047b61378f", "status": "affected", "versionType": "git"}, {"version": "1c0d32fde5bdf1184bc274f864c09799278a1114", "lessThan": "444853cd438201007da5359821adcc2995655ab1", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/netfilter/xt_rateest.c"], "versions": [{"version": "4.10", "status": "affected"}, {"version": "0", "lessThan": "4.10", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.261", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.212", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.178", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.145", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.97", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.40", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.5", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.10", "versionEndExcluding": "5.10.261"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.10", "versionEndExcluding": "5.15.212"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.10", "versionEndExcluding": "6.1.178"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.10", "versionEndExcluding": "6.6.145"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.10", "versionEndExcluding": "6.12.97"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.10", "versionEndExcluding": "6.18.40"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.10", "versionEndExcluding": "7.1.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.10", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/77e9ba358d63fe2eb03c90d29ea85651d95cf2e6"}, {"url": "https://git.kernel.org/stable/c/a3ba938f45cb00f6bf49d3aa3647df9b017f5f08"}, {"url": "https://git.kernel.org/stable/c/bab305dd769d78074adca73505cc2509e1206bf2"}, {"url": "https://git.kernel.org/stable/c/5da915fc159c6b4091669447588e520183969cca"}, {"url": "https://git.kernel.org/stable/c/d5cc4c12a4b90bf099199c3c49ecda7e694f2a2b"}, {"url": "https://git.kernel.org/stable/c/e702f6dd5d21e331f55fd9168c0210542008546d"}, {"url": "https://git.kernel.org/stable/c/905a927b2e6fec7b174e9e5644d271047b61378f"}, {"url": "https://git.kernel.org/stable/c/444853cd438201007da5359821adcc2995655ab1"}], "title": "netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["net/netfilter/xt_rateest.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "77e9ba358d63fe2eb03c90d29ea85651d95cf2e6", "status": "affected", "version": "1c0d32fde5bdf1184bc274f864c09799278a1114", "versionType": "git"}, {"lessThan": "a3ba938f45cb00f6bf49d3aa3647df9b017f5f08", "status": "affected", "version": "1c0d32fde5bdf1184bc274f864c09799278a1114", "versionType": "git"}, {"lessThan": "bab305dd769d78074adca73505cc2509e1206bf2", "status": "affected", "version": "1c0d32fde5bdf1184bc274f864c09799278a1114", "versionType": "git"}, {"lessThan": "5da915fc159c6b4091669447588e520183969cca", "status": "affected", "version": "1c0d32fde5bdf1184bc274f864c09799278a1114", "versionType": "git"}, {"lessThan": "d5cc4c12a4b90bf099199c3c49ecda7e694f2a2b", "status": "affected", "version": "1c0d32fde5bdf1184bc274f864c09799278a1114", "versionType": "git"}, {"lessThan": "e702f6dd5d21e331f55fd9168c0210542008546d", "status": "affected", "version": "1c0d32fde5bdf1184bc274f864c09799278a1114", "versionType": "git"}, {"lessThan": "905a927b2e6fec7b174e9e5644d271047b61378f", "status": "affected", "version": "1c0d32fde5bdf1184bc274f864c09799278a1114", "versionType": "git"}, {"lessThan": "444853cd438201007da5359821adcc2995655ab1", "status": "affected", "version": "1c0d32fde5bdf1184bc274f864c09799278a1114", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["net/netfilter/xt_rateest.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "4.10"}, {"lessThan": "4.10", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.261", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.212", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.178", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.145", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.97", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.40", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.5", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()\n\nOn links faster than ~34 Gbps, where byte rate may exceed 2^32-1\n(~ 4.3 GBps), the comparison result becomes incorrect because the\ntruncated value no longer reflects the actual estimator rate.\n\nFix by changing the local variables to u64."}], "id": "CVE-2026-72349", "lastModified": "2026-08-17T06:18:38.917", "metrics": {}, "published": "2026-08-15T06:22:08.297", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/444853cd438201007da5359821adcc2995655ab1"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/5da915fc159c6b4091669447588e520183969cca"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/77e9ba358d63fe2eb03c90d29ea85651d95cf2e6"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/905a927b2e6fec7b174e9e5644d271047b61378f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/a3ba938f45cb00f6bf49d3aa3647df9b017f5f08"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/bab305dd769d78074adca73505cc2509e1206bf2"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/d5cc4c12a4b90bf099199c3c49ecda7e694f2a2b"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/e702f6dd5d21e331f55fd9168c0210542008546d"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()", "id": "2516691", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2516691"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-190", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nnetfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()\nOn links faster than ~34 Gbps, where byte rate may exceed 2^32-1\n(~ 4.3 GBps), the comparison result becomes incorrect because the\ntruncated value no longer reflects the actual estimator rate.\nFix by changing the local variables to u64.", "A flaw was found in the Linux kernel's netfilter component, specifically within the `xt_rateest` module. This vulnerability occurs on network links operating at speeds of approximately 34 Gigabits per second (Gbps) or faster. Due to an integer truncation issue, the system incorrectly calculates the actual network traffic rate. This can lead to inaccurate rate estimations, potentially disrupting network traffic management and causing unexpected network behavior."], "name": "CVE-2026-72349", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-08-15T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-72349\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-72349\nhttps://lore.kernel.org/linux-cve-announce/2026081511-CVE-2026-72349-bef4@gregkh/T"], "threat_severity": "Moderate"}