)]}'
{
  "commit": "8e2178b6ff2c1c86c3ea021ca7b3a8427b8384bf",
  "tree": "d1463f91a7896e3a5d9c25a07cf4f05b427c72da",
  "parents": [
    "4324fe3f5303bdac93d237c9b7e86e6aa110336e"
  ],
  "author": {
    "name": "Florian Westphal",
    "email": "fw@strlen.de",
    "time": "Wed Jul 15 16:49:47 2026 -0400"
  },
  "committer": {
    "name": "Angel Adetula",
    "email": "angeladetula@google.com",
    "time": "Thu Aug 06 09:52:23 2026 -0700"
  },
  "message": "netfilter: ebtables: zero chainstack array\n\n[ Upstream commit cbfe53599eebffd188938ab6774cc41794f6f9d5 ]\n\nsashiko reports:\n looking at ebtables table\n translation, could a sparse cpu_possible_mask lead to an uninitialized pointer\n free?\n\n If cpu_possible_mask is sparse (for example, CPU 0 and CPU 2 are possible,\n but CPU 1 is not), the allocation loop skips CPU 1. If vmalloc_node() fails at\n CPU 2, the cleanup loop will blindly decrement and call vfree() on\n newinfo-\u003echainstack[1].\n\nNot a real-world bug, such allocation isn\u0027t expected to fail\nin the first place.\n\nBUG\u003db/539153463\nTEST\u003dpresubmit\nRELEASE_NOTE\u003dFixed CVE-2026-64413 in the Linux kernel.\n\nCc: stable@vger.kernel.org\nFixes: 1da177e4c3f4 (\"Linux-2.6.12-rc2\")\nChange-Id: I304e5f5c22ed3483186f13ac9e4790f108c4820d\nSigned-off-by: Florian Westphal \u003cfw@strlen.de\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n(cherry picked from commit 9e6c5169db423e51dcc66a73fd15409c0d38e088)\nSigned-off-by: Angel Adetula \u003cangeladetula@google.com\u003e\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/179627\nReviewed-by: Kevin Liu \u003czhihuil@google.com\u003e\nTested-by: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\nReviewed-by: Dom Huh \u003cdomhuh@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "a43703adb9087edace4fdd47f687a5fc4020bfe4",
      "old_mode": 33188,
      "old_path": "net/bridge/netfilter/ebtables.c",
      "new_id": "32e73f04d5b17df92ad5c8b842a51ac15252c35f",
      "new_mode": 33188,
      "new_path": "net/bridge/netfilter/ebtables.c"
    }
  ]
}