CVE-2026-64412

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: module names must be null-terminated We need to explicitly check the length, else we may pass non-null terminated string to request_module().

CVSS 3.1

7.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

EPSS

0.1% chance of exploitation in the next 30 days; higher than 2% of CVEs (scores of 2026-10-25)

CWE

CWE-125

Published

2026-07-25

Modified

2026-10-19

Record from

the NVD, synced 2026-10-21

Affected

• linux:linux_kernel

References

• https://git.kernel.org/stable/c/084d23f818321390509e9738a0b08bbf46df6425
• https://git.kernel.org/stable/c/0ddca0f90fa3395111d078ae4399615cf3ea94aa
• https://git.kernel.org/stable/c/13a5f532e3a4fc75c33060a026def1572c208643
• https://git.kernel.org/stable/c/43dd2332b8a27b3ac5108791680cade654ab0f96
• https://git.kernel.org/stable/c/5777c8f1c3610786d8482b8f620f40fccaf1542b

Check your stackJSON