Description
Race condition in ebtables netfilter module (ebtables.c) in Linux 2.6, when running on an SMP system that is operating under a heavy load, might allow remote attackers to cause a denial of service (crash) via a series of packets that cause a value to be modified after it has been read but before it has been locked.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.1 | kernel-image-2.6.8-hppa | 2.6.8-6sarge1 | DSA-922-1 |
| Debian 3.1 | kernel-image-2.6.8-ia64 | 2.6.8-14sarge1 | DSA-922-1 |
| Debian 3.1 | kernel-image-2.6.8-m68k | 2.6.8-4sarge1 | DSA-922-1 |
| Debian 3.1 | kernel-image-2.6.8-s390 | 2.6.8-5sarge1 | DSA-922-1 |
| Debian 3.1 | kernel-image-2.6.8-sparc | 2.6.8-15sarge1 | DSA-922-1 |
| Debian 3.1 | kernel-patch-powerpc-2.6.8 | 2.6.8-12sarge1 | DSA-922-1 |
| Debian 3.1 | kernel-source-2.6.8 +3 | 2.6.8-16sarge1 | DSA-922-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | kernel +6 | 2.6.9-22.0.1.EL | RHSA-2005:808 |
Advisories 2
- RHSA-2005:808 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-922-1 kernel-source-2.6.8 - several Debian Security (DSA / DLA) · Mar 9, 2026
References
- RHSA-2005:808 vendor-advisory
- 18056 third-party-advisory
- oval:org.mitre.oval:def:11403 vdb-entry signature
- 17364 third-party-advisory
- SUSE-SA:2005:068 vendor-advisory
- http://sourceforge.net/mailarchive/forum.php?thread_id=6800453&forum_id=8572
- DSA-922 vendor-advisory
- 15049 vdb-entry
- 17141 third-party-advisory
- USN-199-1 vendor-advisory
- MDKSA-2006:072 vendor-advisory
- 17918 third-party-advisory
- FLSA:157459-3 vendor-advisory