In the Linux kernel, the following vulnerability has been resolved:

netfilter: ebtables: module names must be null-terminated

We need to explicitly check the length, else we may pass non-null
terminated string to request_module().

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
bcf4934288402be3464110109a4dae3bd6fb3e93 affected < 43dd2332b8a27b3ac5108791680cade654ab0f96
bcf4934288402be3464110109a4dae3bd6fb3e93 affected < 5777c8f1c3610786d8482b8f620f40fccaf1542b
bcf4934288402be3464110109a4dae3bd6fb3e93 affected < 0ddca0f90fa3395111d078ae4399615cf3ea94aa
bcf4934288402be3464110109a4dae3bd6fb3e93 affected < d2367d99f2455f373996d9ddbe833dbe9f942213
bcf4934288402be3464110109a4dae3bd6fb3e93 affected < da32e78bbb187ed7b137e0007034185570a3a172
bcf4934288402be3464110109a4dae3bd6fb3e93 affected < 13a5f532e3a4fc75c33060a026def1572c208643
bcf4934288402be3464110109a4dae3bd6fb3e93 affected < 7b217960e88b5d2d1e8cdcbcaf3bdf6fe199a0c8
bcf4934288402be3464110109a4dae3bd6fb3e93 affected < 084d23f818321390509e9738a0b08bbf46df6425
Linux Linux affected
Version Status Constraints
4.6 affected —
0 unaffected < 4.6
5.10.261 unaffected ≤ 5.10.*
5.15.212 unaffected ≤ 5.15.*
6.1.178 unaffected ≤ 6.1.*
6.6.145 unaffected ≤ 6.6.*
6.12.96 unaffected ≤ 6.12.*
6.18.39 unaffected ≤ 6.18.*
7.1.4 unaffected ≤ 7.1.*
7.2-rc3 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/084d23f818321390509e9738a0b08bbf46df6425 cve-icon
https://git.kernel.org/stable/c/0ddca0f90fa3395111d078ae4399615cf3ea94aa cve-icon
https://git.kernel.org/stable/c/13a5f532e3a4fc75c33060a026def1572c208643 cve-icon
https://git.kernel.org/stable/c/43dd2332b8a27b3ac5108791680cade654ab0f96 cve-icon
https://git.kernel.org/stable/c/5777c8f1c3610786d8482b8f620f40fccaf1542b cve-icon
https://git.kernel.org/stable/c/7b217960e88b5d2d1e8cdcbcaf3bdf6fe199a0c8 cve-icon
https://git.kernel.org/stable/c/d2367d99f2455f373996d9ddbe833dbe9f942213 cve-icon
https://git.kernel.org/stable/c/da32e78bbb187ed7b137e0007034185570a3a172 cve-icon
History

Sat, 25 Jul 2026 09:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: module names must be null-terminated We need to explicitly check the length, else we may pass non-null terminated string to request_module().
Title netfilter: ebtables: module names must be null-terminated
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-07-25T08:50:52.946Z

Reserved: 2026-07-19T15:36:31.786Z

Link: CVE-2026-64412

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.