CVE-2026-72416

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the nft compat layer of the netfilter subsystem where ebtables emulation fails to reject non-bridge targets. While xtables targets return netfilter verdicts such as NF ACCEPT and NF DROP, ebtables targets use incompatible verdicts like EBT ACCEPT and EBT DROP. The system incorrectly allows a fallback to NFPROTO UNSPEC, which should be prohibited to ensure compatibility and stability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.