The do_replace function in net/bridge/netfilter/ebtables.c in the Linux kernel before 2.6.39 does not ensure that a certain name field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory by leveraging the CAP_NET_ADMIN capability to replace a table, and then reading a modprobe command line.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAE-develUpgrade kernel-PAEUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-xenUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-devel | Dec 1, 2016 | Jun 21, 2012 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jun 21, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 14, 2011 |
| Suse | — | Upgrade kernel-iseries64Upgrade kernel-desktop-baseUpgrade kernel-traceUpgrade kernel-vmipaeUpgrade kernel-xen-develUpgrade kernel-debug-baseUpgrade kernel-ec2-baseUpgrade kernel-pae-baseUpgrade kernel-xen-baseUpgrade kernel-default-develUpgrade kernel-kdumppaeUpgrade kernel-desktopUpgrade kernel-sourceUpgrade kernel-pae-develUpgrade kernel-vmi-baseUpgrade kernel-xenUpgrade kernel-debugUpgrade kernel-symsUpgrade kernel-vanillaUpgrade kernel-vmi-develUpgrade kernel-ec2-develUpgrade kernel-kdumpUpgrade kernel-ec2-extraUpgrade preload-kmp-defaultUpgrade kernel-debug-develUpgrade preload-kmp-desktopUpgrade kernel-bigsmpUpgrade kernel-paeUpgrade kernel-default-baseUpgrade kernel-vanilla-baseUpgrade kernel-desktop-develUpgrade kernel-defaultUpgrade kernel-xenpaeUpgrade kernel-smpUpgrade kernel-vanilla-develUpgrade kernel-trace-develUpgrade kernel-develUpgrade kernel-vmiUpgrade kernel-ec2Upgrade kernel-trace-baseUpgrade kernel-source-vanillaUpgrade kernel-docsUpgrade kernel-ppc64 | Feb 17, 2015 | Jun 21, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.24-29-386 | Nov 8, 2024 | Jun 21, 2012 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 3, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub