CVE-2026-72416
HIGH
MEDIUM
Priority: 0.01
BB Relevance:
40/100
Published: 2026-08-15
Modified: 2026-10-30
First seen: 2026-10-30
Status: active
Attack Surface
Low Complexity
No Interaction
Integ. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
Low
I:
High
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_compat: ebtables emulation must reject non-bridge targets xtables targets return netfilter verdicts: NF_ACCEPT, NF_DROP, and so on. ebtables targets return incompatible verdicts: EBT_ACCEPT, EBT_DROP, ... We cannot allow fallback to NFPROTO_UNSPEC. ebtables doesn't permit this since 11ff7288beb2 ("netfilter: ebtables: reject non-bridge targets") but that commit missed the nft_compat layer.
Affected Software (7)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 0ca743a5599199152a31a7146b83213c786c2eb2 < 7c4f6a55a0fa8efbbe06dfed3fd440bca121f41a |
| Linux | Linux | 0ca743a5599199152a31a7146b83213c786c2eb2 < efc17b9240d821c424bc5191a5c6e9384a06293e |
| Linux | Linux | 0ca743a5599199152a31a7146b83213c786c2eb2 < b3f7a84540a0d014ec42343ff5909657c1bd1994 |
| Linux | Linux | 0ca743a5599199152a31a7146b83213c786c2eb2 < 33e1875d6b5b552a2e5652b40074c604199354ee |
| Linux | Linux | 0ca743a5599199152a31a7146b83213c786c2eb2 < c129b0185e707dce405968e21afccd5728b2ce63 |
| Linux | Linux | 0ca743a5599199152a31a7146b83213c786c2eb2 < 9dbba7e694ec045f21ede2f892fb42b81b4e1692 |
| Linux | Linux | 3.13 |