The vulnerability in the Linux kernel's netfilter ebtables module arises from the lack of explicit length checking on module names, which may result in passing non-null-terminated strings to the request_module() function. This improper string termination could potentially cause unexpected behavior. The vulnerability has been addressed by ensuring module names are properly null-terminated before use.

The vulnerability could lead to unexpected behavior in the kernel when handling module names in netfilter ebtables due to non-null-terminated strings being passed to request_module(). Specific impacts such as privilege escalation or denial of service are not detailed in the provided information.

A fix has been implemented in the Linux kernel to explicitly check the length of module names and ensure they are null-terminated before passing to request_module(). Users should apply the official kernel updates that include this fix. Patch status is not explicitly confirmed in the provided data; users should consult the Linux kernel vendor advisory for current remediation guidance.