{"id":"CVE-2026-43028","title":"netfilter: x_tables: ensure names are nul-terminated","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: x_tables: ensure names are nul-terminated\n\nReject names that lack a \\0 character before feeding them\nto functions that expect c-strings.\n\nFixes tag is the mo…","severity":"high","cvss":7.1,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cvssSource":"cna","vendor":"Linux","product":"Linux","affected":["Linux >= c38c4597e4bf3e99860eac98211748e1ecb0e139 < bcac50ea0a29d430eedc5ac87b215393b567baa9","Linux >= c38c4597e4bf3e99860eac98211748e1ecb0e139 < ea01c1b219f5a11c66918abaa6f052e5a74041d6","Linux >= c38c4597e4bf3e99860eac98211748e1ecb0e139 < aa6cd4a8863391e0a64f62d8922cb0af732a2cf2","Linux >= c38c4597e4bf3e99860eac98211748e1ecb0e139 < c2d4a3abb15ca14716c6d8b9ffcbcd7c63626af4","Linux >= c38c4597e4bf3e99860eac98211748e1ecb0e139 < 673bbd36cba21d10a10f0932f479df7468e26fbb","Linux >= c38c4597e4bf3e99860eac98211748e1ecb0e139 < f419bdc205894750f4d3ec042bc87a1b9cde1351","Linux >= c38c4597e4bf3e99860eac98211748e1ecb0e139 < 73124608172890306b85f2206d8b3cac20e324f1","Linux >= c38c4597e4bf3e99860eac98211748e1ecb0e139 < a958a4f90ddd7de0800b33ca9d7b886b7d40f74e","Linux 4.5"],"published":"2026-05-01","updated":"2026-09-08","sourceUpdated":"2026-09-08T08:48:33.438Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-43028","references":[{"url":"https://git.kernel.org/stable/c/bcac50ea0a29d430eedc5ac87b215393b567baa9"},{"url":"https://git.kernel.org/stable/c/ea01c1b219f5a11c66918abaa6f052e5a74041d6"},{"url":"https://git.kernel.org/stable/c/aa6cd4a8863391e0a64f62d8922cb0af732a2cf2"},{"url":"https://git.kernel.org/stable/c/c2d4a3abb15ca14716c6d8b9ffcbcd7c63626af4"},{"url":"https://git.kernel.org/stable/c/673bbd36cba21d10a10f0932f479df7468e26fbb"},{"url":"https://git.kernel.org/stable/c/f419bdc205894750f4d3ec042bc87a1b9cde1351"},{"url":"https://git.kernel.org/stable/c/73124608172890306b85f2206d8b3cac20e324f1"},{"url":"https://git.kernel.org/stable/c/a958a4f90ddd7de0800b33ca9d7b886b7d40f74e"}],"tags":["cve.org"],"epss":0.00131,"epssPercentile":0.031,"ingestedAt":"2026-09-08T15:33:26.989Z","slug":"CVE-2026-43028","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: x_tables: ensure names are nul-terminated\n\nReject names that lack a \\0 character before feeding them\nto functions that expect c-strings.\n\nFixes tag is the most recent commit that needs this change.\n\n## Affected\n\n- `Linux >= c38c4597e4bf3e99860eac98211748e1ecb0e139 < bcac50ea0a29d430eedc5ac87b215393b567baa9`\n- `Linux >= c38c4597e4bf3e99860eac98211748e1ecb0e139 < ea01c1b219f5a11c66918abaa6f052e5a74041d6`\n- `Linux >= c38c4597e4bf3e99860eac98211748e1ecb0e139 < aa6cd4a8863391e0a64f62d8922cb0af732a2cf2`\n- `Linux >= c38c4597e4bf3e99860eac98211748e1ecb0e139 < c2d4a3abb15ca14716c6d8b9ffcbcd7c63626af4`\n- `Linux >= c38c4597e4bf3e99860eac98211748e1ecb0e139 < 673bbd36cba21d10a10f0932f479df7468e26fbb`\n- `Linux >= c38c4597e4bf3e99860eac98211748e1ecb0e139 < f419bdc205894750f4d3ec042bc87a1b9cde1351`\n- `Linux >= c38c4597e4bf3e99860eac98211748e1ecb0e139 < 73124608172890306b85f2206d8b3cac20e324f1`\n- `Linux >= c38c4597e4bf3e99860eac98211748e1ecb0e139 < a958a4f90ddd7de0800b33ca9d7b886b7d40f74e`\n- `Linux 4.5`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":39,"depthScoreParts":{"impact":39.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}