Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: move to two-stage removal scheme Like previous patches for x_tables, follow same pattern in ebtables. We can't reuse xt helpers: ebt_table struct layout is incompatible. table->ops assignment is now done while still holding the ebt mutex to make sure we never expose partially-filled table struct.
Affected products
linux: linux kernel
References6
- git.kernel.org/stable/c/739d5dac7b2da44a756aa4d758ee3f1ccf5a27f1 Patch
- git.kernel.org/stable/c/b7f0544d86d439cb946515d2ef6a0a75e8626710 Patch
- git.kernel.org/stable/c/ef395579a7631a06d61969fc712eb80402231b89 Patch
- git.kernel.org/stable/c/6fe4c808b6cdb405ed64ea6e740d557bba3d7745
- git.kernel.org/stable/c/b37e27f5d5cbb7723644fdf089e28a216d6093ed
- git.kernel.org/stable/c/f34e5a674afe743d1af80684d64b511f40a5c35d
Metrics
- CVSS 3.1
-
7.8
HIGH
Score source: CNA
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 0% percentile: 3 · as of 14 November 2026
- CWE
- CWE-362
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.