CVE-2026-64079 netfilter: x_tables: allocate hook ops while under mutex

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: allocate hook ops while under mutex arp/ip6tregistertable add the table to the per-netns list via xtregistertable before allocating the per-netns hook ops copy via kmemduparray. This leaves a window where the...

CVE-2026-64079

The CVE-2026-64079 issue affects the Linux kernel netfilter x_tables path. During arp/ipt registration, the per-netns table is added to the list before allocating per-netns hook ops, leaving a window where the table appears with ops=NULL. If a concurrent pernet exit occurs, nf_unregister_net_hook...