The do_replace function in net/bridge/netfilter/ebtables.c in the Linux kernel before 2.6.39 does not ensure that a certain name field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory by leveraging the CAP_NET_ADMIN capability to replace a table, and then reading a modprobe command line.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xen-develUpgrade kernel-PAEUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-PAE-develUpgrade kernel-debugUpgrade kernel-xenUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-devel | Dec 1, 2016 | Jun 21, 2012 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jun 21, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 14, 2011 |
| Suse | — | Upgrade kernel-kdumppaeUpgrade kernel-default-develUpgrade kernel-pae-develUpgrade kernel-vmi-develUpgrade kernel-debug-baseUpgrade kernel-ec2-develUpgrade kernel-desktop-baseUpgrade kernel-symsUpgrade kernel-desktopUpgrade kernel-xen-develUpgrade kernel-vmipaeUpgrade kernel-vanillaUpgrade kernel-xenUpgrade kernel-debugUpgrade kernel-xen-baseUpgrade kernel-sourceUpgrade kernel-traceUpgrade kernel-iseries64Upgrade kernel-vmi-baseUpgrade kernel-pae-baseUpgrade kernel-ec2-baseUpgrade kernel-bigsmpUpgrade kernel-ec2Upgrade kernel-ec2-extraUpgrade kernel-docsUpgrade preload-kmp-desktopUpgrade kernel-smpUpgrade kernel-vmiUpgrade kernel-xenpaeUpgrade kernel-vanilla-baseUpgrade kernel-default-baseUpgrade kernel-paeUpgrade kernel-trace-baseUpgrade kernel-source-vanillaUpgrade kernel-ppc64Upgrade kernel-debug-develUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-kdumpUpgrade kernel-trace-develUpgrade preload-kmp-defaultUpgrade kernel-desktop-develUpgrade kernel-vanilla-devel | Feb 17, 2015 | Jun 21, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.32-32-server | Nov 8, 2024 | Jun 21, 2012 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 3, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub