The do_replace function in net/bridge/netfilter/ebtables.c in the Linux kernel before 2.6.39 does not ensure that a certain name field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory by leveraging the CAP_NET_ADMIN capability to replace a table, and then reading a modprobe command line.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debugUpgrade kernel-PAEUpgrade kernel-docUpgrade kernel-xenUpgrade kernel-debug-develUpgrade kernel-PAE-develUpgrade kernel-headersUpgrade kernel-xen-develUpgrade kernel-develUpgrade kernel | Dec 1, 2016 | Jun 21, 2012 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jun 21, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 14, 2011 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-vmiUpgrade kernel-ec2Upgrade kernel-debug-develUpgrade preload-kmp-desktopUpgrade kernel-trace-develUpgrade kernel-xenpaeUpgrade kernel-defaultUpgrade kernel-kdumpUpgrade kernel-source-vanillaUpgrade preload-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-desktop-develUpgrade kernel-trace-baseUpgrade kernel-vanilla-baseUpgrade kernel-ppc64Upgrade kernel-smpUpgrade kernel-docsUpgrade kernel-vanilla-develUpgrade kernel-paeUpgrade kernel-develUpgrade kernel-bigsmpUpgrade kernel-vmipaeUpgrade kernel-desktopUpgrade kernel-ec2-develUpgrade kernel-debug-baseUpgrade kernel-xenUpgrade kernel-pae-develUpgrade kernel-xen-develUpgrade kernel-kdumppaeUpgrade kernel-default-develUpgrade kernel-vmi-baseUpgrade kernel-vanillaUpgrade kernel-xen-baseUpgrade kernel-vmi-develUpgrade kernel-desktop-baseUpgrade kernel-symsUpgrade kernel-iseries64Upgrade kernel-ec2-baseUpgrade kernel-debugUpgrade kernel-sourceUpgrade kernel-pae-baseUpgrade kernel-trace | Feb 17, 2015 | Jun 21, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.32-217-dove | Nov 8, 2024 | Jun 21, 2012 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 3, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub