CVE-2026-64412 (CVSS 7.1)

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: module names must be null-terminated We need to explicitly check the length, else we may pass non-null terminated string to request_module().

Is your site exposed to CVE-2026-64412?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.1

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

EPSS — Exploit Prediction

0.0013

Probability of exploitation

0.03%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/084d23f818321390509e9738a0b08bbf46df6425 https://git.kernel.org/stable/c/0ddca0f90fa3395111d078ae4399615cf3ea94aa https://git.kernel.org/stable/c/13a5f532e3a4fc75c33060a026def1572c208643 https://git.kernel.org/stable/c/43dd2332b8a27b3ac5108791680cade654ab0f96 https://git.kernel.org/stable/c/5777c8f1c3610786d8482b8f620f40fccaf1542b https://git.kernel.org/stable/c/7b217960e88b5d2d1e8cdcbcaf3bdf6fe199a0c8 https://git.kernel.org/stable/c/d2367d99f2455f373996d9ddbe833dbe9f942213 https://git.kernel.org/stable/c/da32e78bbb187ed7b137e0007034185570a3a172

Frequently Asked Questions

What is CVE-2026-64412? +

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: module names must be null-terminated We need to explicitly check the length, else we may pass non-null terminated string to request_module(). It has a CVSS v3.1 base score of 7.1 (HIGH).

How severe is CVE-2026-64412? +

CVE-2026-64412 has a CVSS v3.1 score of 7.1 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching. The EPSS score is 0.0013, placing it in the 0th percentile for exploitation probability.

How do I check if I'm vulnerable to CVE-2026-64412? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

CVE-2026-64412