CVE-2026-64411

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the netfilter ebtables component, the update counters() and compat update counters() functions forward a user-supplied 32-byte table name to find table lock() without NUL-termination. When a lookup miss occurs, find inlist lock() calls try then request module(), which uses vsnprintf() to process the name. Because the name is not terminated, vsnprintf() reads past the name field and the stack object until a zero byte is encountered, leading to a stack-out-of-bounds read. This issue is also present in compat do replace() via compat copy ebt replace from user().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.