7.8

CVE-2026-64076

netfilter: bridge: eb_tables: close module init race

In the Linux kernel, the following vulnerability has been resolved:

netfilter: bridge: eb_tables: close module init race

sashiko reports for unrelated patch:
 Does the core ebtables initialization in ebtables.c suffer from a similar race?
 Once nf_register_sockopt() completes, the sockopts are exposed globally.

sockopt has to be registered last, just like in ip/ip6/arptables.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 5b53951cfc85329d29df9d07b1e905f4563546a5
Version < c647e2a21bbbaceda6cdb8a44a56f44d231dc4b4
Status affected
Version 5b53951cfc85329d29df9d07b1e905f4563546a5
Version < 02d999dc69b3918dba2414932b5d95f1f75c76cb
Status affected
Version 5b53951cfc85329d29df9d07b1e905f4563546a5
Version < 27414ff1b287ea9a2a11675149ec28e05539f3cc
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.13
Status affected
Version 0
Version < 5.13
Status unaffected
Version <= 6.18.*
Version 6.18.34
Status unaffected
Version <= 7.0.*
Version 7.0.11
Status unaffected
Version <= *
Version 7.1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.027
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/c647e2a21bbbaceda6cdb8a44a56f44d231dc4b4
https://git.kernel.org/stable/c/02d999dc69b3918dba2414932b5d95f1f75c76cb
https://git.kernel.org/stable/c/27414ff1b287ea9a2a11675149ec28e05539f3cc