{"id":"CVE-2026-64412","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ebtables: module names must be null-terminated\n\nWe need to explicitly check the length, else we may pass non-null\nterminated string to request_module().","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ebtables: module names must be null-terminated\n\nWe need to explicitly check the length, else we may pass non-null\nterminated string to request_module().","severity":"high","cvss":7.1,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 4.6.1, < 5.10.261","linux_kernel >= 5.11, < 5.15.212","linux_kernel >= 5.16, < 6.1.178","linux_kernel >= 6.2, < 6.6.145","linux_kernel >= 6.7, < 6.12.96","linux_kernel >= 6.13, < 6.18.39","linux_kernel >= 6.19, < 7.1.4","linux_kernel = 4.6","linux_kernel = 7.2"],"patched":["linux_kernel 7.1.4"],"published":"2026-07-25","updated":"2026-09-08","sourceUpdated":"2026-09-08T09:18:18.950","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-64412","references":[{"url":"https://git.kernel.org/stable/c/084d23f818321390509e9738a0b08bbf46df6425","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/0ddca0f90fa3395111d078ae4399615cf3ea94aa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/13a5f532e3a4fc75c33060a026def1572c208643","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/43dd2332b8a27b3ac5108791680cade654ab0f96","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/5777c8f1c3610786d8482b8f620f40fccaf1542b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/7b217960e88b5d2d1e8cdcbcaf3bdf6fe199a0c8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/d2367d99f2455f373996d9ddbe833dbe9f942213","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/da32e78bbb187ed7b137e0007034185570a3a172","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-019113.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"tags":["nvd","cve.org"],"epss":0.00128,"epssPercentile":0.0279,"ingestedAt":"2026-09-08T15:33:26.949Z","slug":"CVE-2026-64412","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ebtables: module names must be null-terminated\n\nWe need to explicitly check the length, else we may pass non-null\nterminated string to request_module().\n\n## Affected\n\n- `linux_kernel >= 4.6.1, < 5.10.261`\n- `linux_kernel >= 5.11, < 5.15.212`\n- `linux_kernel >= 5.16, < 6.1.178`\n- `linux_kernel >= 6.2, < 6.6.145`\n- `linux_kernel >= 6.7, < 6.12.96`\n- `linux_kernel >= 6.13, < 6.18.39`\n- `linux_kernel >= 6.19, < 7.1.4`\n- `linux_kernel = 4.6`\n- `linux_kernel = 7.2`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 7.1.4`","depth":"twilight","depthScore":39,"depthScoreParts":{"impact":39.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}