← Back

CVE-2026-64412

nvd nist
Published: Jul 25, 2026Modified: Oct 19, 2026

JSON object

Loading...
7.1
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Exploitability: 1.8 / Impact: 5.2
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary)

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: module names must be null-terminated We need to explicitly check the length, else we may pass non-null terminated string to request_module().

Affected (13)

Products: Linux: Linux Kernel
Linux
1 product
Linux Kernel
Configuration A
13 vulnerable
Vulnerable SoftwareAffected Versions
Linux
Linux Kernel
4.6.1 ≤ version < 5.10.261
Linux Kernel
5.11 ≤ version < 5.15.212
Linux Kernel
5.16 ≤ version < 6.1.178
Linux Kernel
6.13 ≤ version < 6.18.39
Linux Kernel
6.19 ≤ version < 7.1.4
Linux Kernel
6.2 ≤ version < 6.6.145
Linux Kernel
6.7 ≤ version < 6.12.96
Linux Kernel
Version 4.6
Linux Kernel
Version 4.6 rc5
Linux Kernel
Version 4.6 rc6
Linux Kernel
Version 4.6 rc7
Linux Kernel
Version 7.2 rc1
Linux Kernel
Version 7.2 rc2

Related CWEs

CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.

References (10)

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Timeline

No history available yet.