The do_replace function in net/bridge/netfilter/ebtables.c in the Linux kernel before 2.6.39 does not ensure that a certain name field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory by leveraging the CAP_NET_ADMIN capability to replace a table, and then reading a modprobe command line.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-PAE-develUpgrade kernel-xenUpgrade kernel-xen-develUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-PAEUpgrade kernel-docUpgrade kernel-develUpgrade kernel | Dec 1, 2016 | Jun 21, 2012 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jun 21, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 14, 2011 |
| Suse | — | Upgrade kernel-desktop-baseUpgrade kernel-desktopUpgrade kernel-default-develUpgrade kernel-xen-develUpgrade kernel-iseries64Upgrade kernel-xen-baseUpgrade kernel-pae-baseUpgrade kernel-vanillaUpgrade kernel-symsUpgrade kernel-xenUpgrade kernel-ec2-develUpgrade kernel-debug-baseUpgrade kernel-pae-develUpgrade kernel-vmipaeUpgrade kernel-kdumppaeUpgrade kernel-sourceUpgrade kernel-vmi-develUpgrade kernel-vmi-baseUpgrade kernel-debugUpgrade kernel-ec2-baseUpgrade kernel-traceUpgrade kernel-trace-baseUpgrade kernel-vmiUpgrade kernel-desktop-develUpgrade preload-kmp-defaultUpgrade kernel-ppc64Upgrade kernel-vanilla-baseUpgrade kernel-trace-develUpgrade kernel-paeUpgrade kernel-debug-develUpgrade kernel-xenpaeUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-ec2-extraUpgrade kernel-kdumpUpgrade kernel-smpUpgrade kernel-vanilla-develUpgrade kernel-bigsmpUpgrade preload-kmp-desktopUpgrade kernel-source-vanillaUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kernel-ec2 | Feb 17, 2015 | Jun 21, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.32-32-server | Nov 8, 2024 | Jun 21, 2012 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 3, 2012 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub