CVE-2026-72416
netfilter: nft_compat: ebtables emulation must reject non-bridge targets
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_compat: ebtables emulation must reject non-bridge targets xtables targets return netfilter verdicts: NF_ACCEPT, NF_DROP, and so on. ebtables targets return incompatible verdicts: EBT_ACCEPT, EBT_DROP, ... We cannot allow fallback to NFPROTO_UNSPEC. ebtables doesn't permit this since 11ff7288beb2 ("netfilter: ebtables: reject non-bridge targets") but that commit missed the nft_compat layer.
| Vendor | linux |
| Product | linux |
| Ecosystems | |
| Industries | Technology |
| Published | Aug 15, 2026 |
Stay Ahead of the Next One
Get instant alerts for linux linux
Be the first to know when new unknown vulnerabilities affecting linux linux are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Linux / Linux
0ca743a5599199152a31a7146b83213c786c2eb2 < efc17b9240d821c424bc5191a5c6e9384a06293e 0ca743a5599199152a31a7146b83213c786c2eb2 < b3f7a84540a0d014ec42343ff5909657c1bd1994 0ca743a5599199152a31a7146b83213c786c2eb2 < 33e1875d6b5b552a2e5652b40074c604199354ee 0ca743a5599199152a31a7146b83213c786c2eb2 < c129b0185e707dce405968e21afccd5728b2ce63 0ca743a5599199152a31a7146b83213c786c2eb2 < 9dbba7e694ec045f21ede2f892fb42b81b4e1692
Linux / Linux
3.13
References
git.kernel.org: https://git.kernel.org/stable/c/efc17b9240d821c424bc5191a5c6e9384a06293e git.kernel.org: https://git.kernel.org/stable/c/b3f7a84540a0d014ec42343ff5909657c1bd1994 git.kernel.org: https://git.kernel.org/stable/c/33e1875d6b5b552a2e5652b40074c604199354ee git.kernel.org: https://git.kernel.org/stable/c/c129b0185e707dce405968e21afccd5728b2ce63 git.kernel.org: https://git.kernel.org/stable/c/9dbba7e694ec045f21ede2f892fb42b81b4e1692