CVE-2026-64413

A flaw was found in the Linux kernel's netfilter ebtables component. This vulnerability involves an uninitialized pointer free that can occur when the system's CPU mask is sparse and a memory allocation fails. Under these specific and unlikely conditions, the kernel might attempt to free an uninitialized memory pointer, which could lead to system instability or a denial of service (DoS).

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation is constrained to a local denial of service requiring both elevated network administration privileges and rare runtime conditions, namely an allocation failure across a sparse CPU mask. Standard deployments are rarely affected because modern environments typically rely on nftables rather than legacy bridge filtering, and triggering the error path requires an uncommon hardware topology under severe memory pressure. Consequently, the flaw cannot be exploited remotely and does not compromise system integrity or confidentiality.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.