In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: module names must be null-terminated We need to explicitly… (CVE-2026-64412)
Source GCVE Database
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 2% of CVEs
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HWhat to do
AI-suggested
A fix for this vulnerability has been implemented in the Linux kernel. Users and administrators should apply the official kernel updates that resolve this issue. Patch status is not explicitly confirmed in the provided data, so verify with the Linux kernel vendor advisory for the exact fixed versions and update accordingly.
Description
A high-severity vulnerability in the Linux kernel's netfilter ebtables component was resolved. The issue involved module names that were not properly null-terminated, which could lead to passing non-null-terminated strings to the request_module() function. This flaw could result in high confidentiality impact and high availability impact without requiring user interaction.
References
- nvd.nist.gov/vuln/detail/CVE-2026-64412 (opens in a new tab)
- git.kernel.org/stable/c/084d23f818321390509e9738a0b08bbf46df6425 (opens in a new tab)
- git.kernel.org/stable/c/0ddca0f90fa3395111d078ae4399615cf3ea94aa (opens in a new tab)
- git.kernel.org/stable/c/13a5f532e3a4fc75c33060a026def1572c208643 (opens in a new tab)
- git.kernel.org/stable/c/43dd2332b8a27b3ac5108791680cade654ab0f96 (opens in a new tab)
- git.kernel.org/stable/c/5777c8f1c3610786d8482b8f620f40fccaf1542b (opens in a new tab)
- git.kernel.org/stable/c/7b217960e88b5d2d1e8cdcbcaf3bdf6fe199a0c8 (opens in a new tab)
- git.kernel.org/stable/c/d2367d99f2455f373996d9ddbe833dbe9f942213 (opens in a new tab)
- git.kernel.org/stable/c/da32e78bbb187ed7b137e0007034185570a3a172 (opens in a new tab)
- cert-portal.siemens.com/productcert/html/ssa-019113.html (opens in a new tab)