The Linux kernel netfilter ebtables subsystem contained a vulnerability where user-supplied 32-byte table names were forwarded to find_table_lock() without proper NUL-termination. On a lookup miss, this caused vsnprintf() to read beyond the buffer boundary, resulting in a stack-out-of-bounds read detected by KASAN. The flaw was present in update_counters() and compat_update_counters() functions. The fix involved terminating the table name string before passing it to find_table_lock() to prevent out-of-bounds reads. Other callers already performed this termination correctly.

This vulnerability causes a stack-out-of-bounds read in kernel memory, which may lead to kernel crashes or information disclosure. The description does not specify any known exploits in the wild or direct privilege escalation, but out-of-bounds reads in kernel space can undermine system stability and security.

A fix has been implemented in the Linux kernel to properly NUL-terminate the table name before passing it to find_table_lock(). Users and administrators should apply the official kernel updates that include this fix. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor or Linux kernel advisories for the current remediation guidance and apply updates accordingly.