7

CVE-2026-64413

netfilter: ebtables: zero chainstack array

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ebtables: zero chainstack array

sashiko reports:
 looking at ebtables table
 translation, could a sparse cpu_possible_mask lead to an uninitialized pointer
 free?

 If cpu_possible_mask is sparse (for example, CPU 0 and CPU 2 are possible,
 but CPU 1 is not), the allocation loop skips CPU 1. If vmalloc_node() fails at
 CPU 2, the cleanup loop will blindly decrement and call vfree() on
 newinfo->chainstack[1].

Not a real-world bug, such allocation isn't expected to fail
in the first place.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 2.6.12.1 < 5.10.261
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.212
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.178
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.145
Linux ≫ Linux Kernel Version >= 6.7 < 6.12.97
Linux ≫ Linux Kernel Version >= 6.13 < 6.18.39
Linux ≫ Linux Kernel Version >= 6.19 < 7.1.4
Linux ≫ Linux Kernel Version 2.6.12 Update -
Linux ≫ Linux Kernel Version 2.6.12 Update rc2
Linux ≫ Linux Kernel Version 2.6.12 Update rc3
Linux ≫ Linux Kernel Version 2.6.12 Update rc4
Linux ≫ Linux Kernel Version 2.6.12 Update rc5
Linux ≫ Linux Kernel Version 7.2 Update rc1
Linux ≫ Linux Kernel Version 7.2 Update rc2
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.023
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7 1 5.9
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-908 Use of Uninitialized Resource

The product uses or accesses a resource that has not been initialized.

https://cert-portal.siemens.com/productcert/html/ssa-019113.html
https://git.kernel.org/stable/c/2ade612967e2cdfb9290ebcb773f302c82f311fa
Patch
https://git.kernel.org/stable/c/42bef500d07b5769d916e9122a3e3fa3fd2245ef
Patch
https://git.kernel.org/stable/c/fc7f105451044501a50cfd530cfa3b472c54acbc
Patch
https://git.kernel.org/stable/c/9e6c5169db423e51dcc66a73fd15409c0d38e088
Patch
https://git.kernel.org/stable/c/29bf41a9b59aff9f6197df58641a00037d567ca8
Patch
https://git.kernel.org/stable/c/9f74d28e903fa4fdf82f870d0aeadddc8196e41c
Patch
https://git.kernel.org/stable/c/5ee856e4208acafaaaf7b84824d39b78c21345d6
Patch
https://git.kernel.org/stable/c/cbfe53599eebffd188938ab6774cc41794f6f9d5
Patch
https://cert-portal.siemens.com/productcert/html/ssa-457936.html