The do_replace function in net/bridge/netfilter/ebtables.c in the Linux kernel before 2.6.39 does not ensure that a certain name field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory by leveraging the CAP_NET_ADMIN capability to replace a table, and then reading a modprobe command line.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debugUpgrade kernel-PAEUpgrade kernel-docUpgrade kernel-xenUpgrade kernel-debug-develUpgrade kernel-PAE-develUpgrade kernel-headersUpgrade kernel-xen-develUpgrade kernel-develUpgrade kernel | Dec 1, 2016 | Jun 21, 2012 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jun 21, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 14, 2011 |
| Suse | — | Upgrade kernel-desktopUpgrade kernel-sourceUpgrade kernel-traceUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-xen-baseUpgrade kernel-vmipaeUpgrade kernel-xenUpgrade kernel-ec2-develUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-vmi-baseUpgrade kernel-ec2-baseUpgrade kernel-iseries64Upgrade kernel-pae-baseUpgrade kernel-vanillaUpgrade kernel-desktop-baseUpgrade kernel-kdumppaeUpgrade kernel-debug-baseUpgrade kernel-pae-develUpgrade kernel-vmi-develUpgrade kernel-docsUpgrade kernel-ec2Upgrade kernel-default-baseUpgrade kernel-kdumpUpgrade kernel-defaultUpgrade kernel-desktop-develUpgrade kernel-debug-develUpgrade preload-kmp-defaultUpgrade kernel-bigsmpUpgrade kernel-ec2-extraUpgrade kernel-xenpaeUpgrade kernel-vmiUpgrade preload-kmp-desktopUpgrade kernel-source-vanillaUpgrade kernel-trace-develUpgrade kernel-vanilla-baseUpgrade kernel-vanilla-develUpgrade kernel-ppc64Upgrade kernel-trace-baseUpgrade kernel-develUpgrade kernel-paeUpgrade kernel-smp | Feb 17, 2015 | Jun 21, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.38-10-virtual | Nov 8, 2024 | Jun 21, 2012 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 3, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub