Linux EUVD-2026-45649

Local privilege escalation and memory-safety exposure in the Linux kernel netfilter bridge ebtables subsystem stems from a module-initialization race where nf_register_sockopt() runs before ebtables data structures are fully initialized, exposing the setsockopt/getsockopt interface globally too early. On affected kernels (5.13 through builds before the 6.18.34 / 7.0.11 / 7.1 stable fixes), a local low-privileged actor with the ability to reach ebtables sockopts during the init window can trigger operations on uninitialized state, risking high confidentiality, integrity, and availability impact (CVSS 7.8). There is no public exploit identified at time of analysis and EPSS is low (0.17%), so this is a code-correctness fix rather than an actively exploited threat.