In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: move to two-stage removal scheme Like previous patches for x_tables, follow same pattern in ebtables. We can't reuse xt helpers: ebt_table struct layout is incompatible. table->ops assignment is now done while still holding the ebt mutex to make sure we never expose partially-filled table struct.
Fix
Patch, vendor advisory and mitigation references on NVD 3
- https://git.kernel.org/stable/c/739d5dac7b2da44a756aa4d758ee3f1ccf5a27f1 Patch
- https://git.kernel.org/stable/c/b7f0544d86d439cb946515d2ef6a0a75e8626710 Patch
- https://git.kernel.org/stable/c/ef395579a7631a06d61969fc712eb80402231b89 Patch
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 4
- References+2 references (now 5)NVD modified 2026-10-21 13:19
- CwesCWE-362NVD modified 2026-10-19 21:17
- StatusAnalyzed → ModifiedNVD modified 2026-10-19 21:17
- First seenCVSS 7.8 · linuxNVD modified 2026-10-16 16:19
Affected (CPE criteria) 4
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*
References 5
- https://git.kernel.org/stable/c/6fe4c808b6cdb405ed64ea6e740d557bba3d7745
- https://git.kernel.org/stable/c/739d5dac7b2da44a756aa4d758ee3f1ccf5a27f1 Patch
- https://git.kernel.org/stable/c/b7f0544d86d439cb946515d2ef6a0a75e8626710 Patch
- https://git.kernel.org/stable/c/ef395579a7631a06d61969fc712eb80402231b89 Patch
- https://git.kernel.org/stable/c/f34e5a674afe743d1af80684d64b511f40a5c35d