7

CVE-2026-64413

netfilter: ebtables: zero chainstack array

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ebtables: zero chainstack array

sashiko reports:
 looking at ebtables table
 translation, could a sparse cpu_possible_mask lead to an uninitialized pointer
 free?

 If cpu_possible_mask is sparse (for example, CPU 0 and CPU 2 are possible,
 but CPU 1 is not), the allocation loop skips CPU 1. If vmalloc_node() fails at
 CPU 2, the cleanup loop will blindly decrement and call vfree() on
 newinfo->chainstack[1].

Not a real-world bug, such allocation isn't expected to fail
in the first place.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 2ade612967e2cdfb9290ebcb773f302c82f311fa
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 42bef500d07b5769d916e9122a3e3fa3fd2245ef
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < fc7f105451044501a50cfd530cfa3b472c54acbc
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 9e6c5169db423e51dcc66a73fd15409c0d38e088
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 29bf41a9b59aff9f6197df58641a00037d567ca8
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 9f74d28e903fa4fdf82f870d0aeadddc8196e41c
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 5ee856e4208acafaaaf7b84824d39b78c21345d6
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < cbfe53599eebffd188938ab6774cc41794f6f9d5
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 2.6.12
Status affected
Version 0
Version < 2.6.12
Status unaffected
Version <= 5.10.*
Version 5.10.261
Status unaffected
Version <= 5.15.*
Version 5.15.212
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.97
Status unaffected
Version <= 6.18.*
Version 6.18.39
Status unaffected
Version <= 7.1.*
Version 7.1.4
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.023
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7 1 5.9
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/2ade612967e2cdfb9290ebcb773f302c82f311fa
https://git.kernel.org/stable/c/42bef500d07b5769d916e9122a3e3fa3fd2245ef
https://git.kernel.org/stable/c/fc7f105451044501a50cfd530cfa3b472c54acbc
https://git.kernel.org/stable/c/9e6c5169db423e51dcc66a73fd15409c0d38e088
https://git.kernel.org/stable/c/29bf41a9b59aff9f6197df58641a00037d567ca8
https://git.kernel.org/stable/c/9f74d28e903fa4fdf82f870d0aeadddc8196e41c
https://git.kernel.org/stable/c/5ee856e4208acafaaaf7b84824d39b78c21345d6
https://git.kernel.org/stable/c/cbfe53599eebffd188938ab6774cc41794f6f9d5