CVE-2026-64412 - Vulnerability Details

- netfilter: ebtables: module names must be null-terminated

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ebtables: module names must be null-terminated

We need to explicitly check the length, else we may pass non-null
terminated string to request_module().

Published: 2026-07-25

Score: 7.1 High

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`bcf4934288402be3464110109a4dae3bd6fb3e93`	affected	< 43dd2332b8a27b3ac5108791680cade654ab0f96
`bcf4934288402be3464110109a4dae3bd6fb3e93`	affected	< 5777c8f1c3610786d8482b8f620f40fccaf1542b
`bcf4934288402be3464110109a4dae3bd6fb3e93`	affected	< 0ddca0f90fa3395111d078ae4399615cf3ea94aa
`bcf4934288402be3464110109a4dae3bd6fb3e93`	affected	< d2367d99f2455f373996d9ddbe833dbe9f942213
`bcf4934288402be3464110109a4dae3bd6fb3e93`	affected	< da32e78bbb187ed7b137e0007034185570a3a172
`bcf4934288402be3464110109a4dae3bd6fb3e93`	affected	< 13a5f532e3a4fc75c33060a026def1572c208643
`bcf4934288402be3464110109a4dae3bd6fb3e93`	affected	< 7b217960e88b5d2d1e8cdcbcaf3bdf6fe199a0c8
`bcf4934288402be3464110109a4dae3bd6fb3e93`	affected	< 084d23f818321390509e9738a0b08bbf46df6425

Linux

affected

Version	Status	Constraints
`4.6`	affected	—
`0`	unaffected	< 4.6
`5.10.261`	unaffected	≤ 5.10.*
`5.15.212`	unaffected	≤ 5.15.*
`6.1.178`	unaffected	≤ 6.1.*
`6.6.145`	unaffected	≤ 6.6.*
`6.12.96`	unaffected	≤ 6.12.*
`6.18.39`	unaffected	≤ 6.18.*
`7.1.4`	unaffected	≤ 7.1.*
`7.2-rc3`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[bcf4934288402be3464110109a4dae3bd6fb3e93,43dd2332b8a27b3ac5108791680cade654ab0f96)`	affected	code_commit	—
`[bcf4934288402be3464110109a4dae3bd6fb3e93,5777c8f1c3610786d8482b8f620f40fccaf1542b)`	affected	code_commit	—
`[bcf4934288402be3464110109a4dae3bd6fb3e93,0ddca0f90fa3395111d078ae4399615cf3ea94aa)`	affected	code_commit	—
`[bcf4934288402be3464110109a4dae3bd6fb3e93,d2367d99f2455f373996d9ddbe833dbe9f942213)`	affected	code_commit	—
`[bcf4934288402be3464110109a4dae3bd6fb3e93,da32e78bbb187ed7b137e0007034185570a3a172)`	affected	code_commit	—
`[bcf4934288402be3464110109a4dae3bd6fb3e93,13a5f532e3a4fc75c33060a026def1572c208643)`	affected	code_commit	—
`[bcf4934288402be3464110109a4dae3bd6fb3e93,7b217960e88b5d2d1e8cdcbcaf3bdf6fe199a0c8)`	affected	code_commit	—
`[bcf4934288402be3464110109a4dae3bd6fb3e93,084d23f818321390509e9738a0b08bbf46df6425)`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`4.6`	affected	semver	—
`[0,4.6)`	unaffected	semver	—
`[5.10.261,5.11.0)`	unaffected	semver	—
`[5.15.212,5.16.0)`	unaffected	semver	—
`[6.1.178,6.2.0)`	unaffected	semver	—
`[6.6.145,6.7.0)`	unaffected	semver	—
`[6.12.96,6.13.0)`	unaffected	semver	—
`[6.18.39,6.19.0)`	unaffected	semver	—
`[7.1.4,7.2.0)`	unaffected	semver	—
`[7.2-rc3,*]`	unaffected	semver	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00126.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/084d23f818321390509e9738a0b08bbf46df6425
https://git.kernel.org/stable/c/0ddca0f90fa3395111d078ae4399615cf3ea94aa
https://git.kernel.org/stable/c/13a5f532e3a4fc75c33060a026def1572c208643
https://git.kernel.org/stable/c/43dd2332b8a27b3ac5108791680cade654ab0f96
https://git.kernel.org/stable/c/5777c8f1c3610786d8482b8f620f40fccaf1542b
https://git.kernel.org/stable/c/7b217960e88b5d2d1e8cdcbcaf3bdf6fe199a0c8
https://git.kernel.org/stable/c/d2367d99f2455f373996d9ddbe833dbe9f942213
https://git.kernel.org/stable/c/da32e78bbb187ed7b137e0007034185570a3a172
https://lore.kernel.org/linux-cve-announce/2026072532-CVE-2026-64412-2163@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2026-64412
https://www.cve.org/CVERecord?id=CVE-2026-64412

History

Thu, 30 Jul 2026 12:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-125
References		https://lore.kernel.org/linux-cve-announce/2026072532-CVE-2026-64412-2163@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-64412 https://www.cve.org/CVERecord?id=CVE-2026-64412
Metrics	threat_severity `None`	threat_severity `Moderate`

Mon, 27 Jul 2026 05:45:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-20

Mon, 27 Jul 2026 05:15:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 7.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H'}`

Sat, 25 Jul 2026 09:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: module names must be null-terminated We need to explicitly check the length, else we may pass non-null terminated string to request_module().
Title		netfilter: ebtables: module names must be null-terminated
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/084d23f818321390509e9738a0b08bbf46df6425 https://git.kernel.org/stable/c/0ddca0f90fa3395111d078ae4399615cf3ea94aa https://git.kernel.org/stable/c/13a5f532e3a4fc75c33060a026def1572c208643 https://git.kernel.org/stable/c/43dd2332b8a27b3ac5108791680cade654ab0f96 https://git.kernel.org/stable/c/5777c8f1c3610786d8482b8f620f40fccaf1542b https://git.kernel.org/stable/c/7b217960e88b5d2d1e8cdcbcaf3bdf6fe199a0c8 https://git.kernel.org/stable/c/d2367d99f2455f373996d9ddbe833dbe9f942213 https://git.kernel.org/stable/c/da32e78bbb187ed7b137e0007034185570a3a172

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-07-25T08:50:52.946Z

Updated: 2026-07-27T05:00:43.047Z

Reserved: 2026-07-19T15:36:31.786Z

Link: CVE-2026-64412

Vulnrichment

No data.

NVD

No data.

Redhat

Severity : Moderate

Publid Date: 2026-07-25T00:00:00Z

Links: CVE-2026-64412 - Bugzilla

OpenCVE Enrichment

Updated: 2026-07-27T05:30:06Z

Weaknesses

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object