SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-64412

HIGH · CVSS 7.1 EPSS 0.13%

Source: NVD + CISA KEV + EPSS · Published 2026-07-25 · Last synced 2026-08-24

CyberRota Analysis

AI-Generated

A vulnerability in the Linux kernel's netfilter component allows for the potential passing of non-null terminated strings to the request_module() function, which could lead to unexpected behavior or system crashes. This issue has a high severity rating (CVSS 7.1) and should be prioritized by organizations using affected Linux distributions, particularly those relying on ebtables for network filtering. Immediate patching is recommended to mitigate the risk of exploitation.

CVE
CVE-2026-64412
Severity
HIGH
CVSS
7.1
EPSS
0.13%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: module names must be null-terminated We need to explicitly check the length, else we may pass non-null terminated string to request_module().