CVE-2026-72416: netfilter: nft_compat: ebtables emulation must reject non-bridge targets
Published Aug 15, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nftcompat: ebtables emulation must reject non-bridge targets
xtables targets return netfilter verdicts: NFACCEPT, NFDROP, and so on. ebtables targets return incompatible verdicts: EBTACCEPT, EBTDROP, ... We cannot allow fallback to NFPROTOUNSPEC.
ebtables doesn't permit this since 11ff7288beb2 ("netfilter: ebtables: reject non-bridge targets") but that commit missed the nftcompat layer.
Affected Software
1 affected component
Linux Linux kernel
Event History
Aug 15, 2026
CVE Published
via MITRE·05:56 AM
Data Sourced
via MITRE·05:56 AM
Description