What is the CVSS score of EUVD-2026-45651?

EUVD-2026-45651 has a contested CVSS base score of 7.8 from a third party (e.g. CISA-ADP), while the vendor rates it High. vuln.today uses the vendor rating as authoritative.

Which versions of Linux Kernel are affected by EUVD-2026-45651?

A memory corruption vulnerability (CVE-2026-64078) in the Linux kernel netfilter subsystem affects systems where local users with network-admin capability could trigger denial of service or potential…. A patch is available.

How to fix or mitigate EUVD-2026-45651?

Within 24 hours, identify all Linux systems running affected netfilter x_tables versions and audit which systems allow untrusted local users with network-admin capability; deprioritize single-tenant systems with restricted user access. Within 7 days, obtain the patched kernel version from your Linux distribution vendor, test it in staging environments, and validate compatibility with existing network policies and iptables/nftables configurations. Within 30 days, deploy the patched kernel to all production systems requiring a reboot, and confirm via kernel version audit that no systems remain on vulnerable versions.

Linux Kernel EUVD-2026-45651

| CVE-2026-64078 HIGH

2026-07-19 Linux

GHSA-crf8-9wpw-7jgp

Information Disclosure Linux

High

Disputed · 7.8 Vendor: Linux

Severity by source

Sources disagree (Low–High)

Vendor (Linux) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

7.0 HIGH

Local net-admin caller (AV:L/PR:L) must win a teardown race, justifying AC:H; a successful UAF yields kernel memory corruption with full C/I/A impact.

3.1 AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SUSE

HIGH

qualitative

Red Hat

5.5 LOW

qualitative

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorVendor: Linux

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 20, 2026 - 17:16 vuln.today

CVSS changed

Jul 20, 2026 - 15:22 NVD

7.8 (HIGH)

Patch available

Jul 19, 2026 - 17:03 EUVD

CVE Published

Jul 19, 2026 - 15:39 cve.org

UNKNOWN (no severity yet)

CVE Published

Jul 19, 2026 - 15:39 cve.org

HIGH 7.8

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

netfilter: x_tables: add and use xtables_unregister_table_exit

Previous change added xtables_unregister_table_pre_exit to detach the table from the packetpath and to unlink it from the active table list. In case of rmmod, userspace that is doing set/getsockopt for this table will not be able to re-instantiate the table:

The larval table has been removed already
existing instantiated table is no longer on the xt pernet table list.

This adds the second stage helper:

unlink the table from the dying list, free the hook ops (if any) and do the audit notification. It replaces xt_unregister_table().

AnalysisAI

Memory corruption in the Linux kernel netfilter x_tables subsystem lets a local user with network-admin capability trigger a use-after-free during table module removal (rmmod) while userspace performs concurrent set/getsockopt operations on the same table. The fix introduces a two-stage teardown (xtables_unregister_table_exit) that unlinks the table from the dying list, frees hook ops, and emits the audit notification, replacing the racy single-stage xt_unregister_table(). Rated CVSS 7.8 (local, high CIA impact); EPSS is low (0.17%), it is not in CISA KEV, and no public exploit has been identified at time of analysis.

Technical ContextAI

The affected component is netfilter x_tables, the kernel framework underpinning iptables/ip6tables/arptables and their per-protocol match/target modules (e.g. iptable_filter, iptable_nat). Tables are registered per-network-namespace on an active list and can be reconfigured through the IPT_SO_SET/GET setsockopt/getsockopt interface. When a table module is unloaded, the original xt_unregister_table() removed the table in a single step; if userspace was simultaneously instantiating or querying that table, the object could be accessed after being freed. The root-cause class is a use-after-free / lifecycle race (CWE-416, related to CWE-362) - note the source CWE is marked N/A and the intelligence tag 'Information Disclosure' understates the memory-safety nature, since the CVSS vector claims full integrity and availability impact, not just disclosure.

RemediationAI

Vendor-released patch: update to Linux kernel 6.18.34, 7.0.11, or 7.1 (or your distribution's backported build carrying commits 86ee5bc9, 8026e516, or b4597d5f) and reboot into the patched kernel. Apply the fix from git.kernel.org (https://git.kernel.org/stable/c/86ee5bc9c0f0e652e19f395675a432de11b75514 and companion commits). Until patched, reduce exposure by restricting the ability to load/unload netfilter table modules and to call the x_tables setsockopt interface: drop CAP_NET_ADMIN from untrusted users and containers (trade-off: breaks legitimate firewall management for those principals), set kernel.modules_disabled=1 or restrict module autoloading where feasible (trade-off: prevents on-demand module changes and may need a reboot to reset), and avoid granting unprivileged user namespaces with net-admin to untrusted workloads (trade-off: may break some container networking features). These controls limit who can reach the vulnerable path but do not eliminate the race for privileged callers.

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

9.8

CVE-2021-34523 CRITICAL POC

9.0

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

Vendor StatusVendor

SUSE

Severity: Important

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Affected
SUSE Linux Enterprise Desktop 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 16.0	Affected

EUVD-2026-45651 vulnerability details – vuln.today

Back

Linux Kernel EUVD-2026-45651

Severity by source

CVSS VectorVendor: Linux

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

Same technique Information Disclosure

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code