{"id":"CVE-2026-43028","revision":"a7a59568d20d47e1bbce523e0529877a","records":[{"revision":"a7a59568d20d47e1bbce523e0529877a","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-43028","aliases":[],"title":"netfilter: x_tables: ensure names are nul-terminated","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: x_tables: ensure names are nul-terminated\n\nReject names that lack a \\0 character before feeding them\nto functions that expect c-strings.\n\nFixes tag is the most recent commit that needs this change.","state":0,"publishedAt":"2026-05-01T14:15:29.192+00:00","modifiedAt":"2026-10-19T19:06:10.219+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/netfilter/xt_cgroup.c\",\n                        \"net/netfilter/xt_rateest.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"c38c4597e4bf3e99860eac98211748e1ecb0e139\",\n                            \"lessThan\": \"bcac50ea0a29d430eedc5ac87b215393b567baa9\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c38c4597e4bf3e99860eac98211748e1ecb0e139\",\n                            \"lessThan\": \"ea01c1b219f5a11c66918abaa6f052e5a74041d6\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c38c4597e4bf3e99860eac98211748e1ecb0e139\",\n                            \"lessThan\": \"aa6cd4a8863391e0a64f62d8922cb0af732a2cf2\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c38c4597e4bf3e99860eac98211748e1ecb0e139\",\n                            \"lessThan\": \"c2d4a3abb15ca14716c6d8b9ffcbcd7c63626af4\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c38c4597e4bf3e99860eac98211748e1ecb0e139\",\n                            \"lessThan\": \"673bbd36cba21d10a10f0932f479df7468e26fbb\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c38c4597e4bf3e99860eac98211748e1ecb0e139\",\n                            \"lessThan\": \"f419bdc205894750f4d3ec042bc87a1b9cde1351\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c38c4597e4bf3e99860eac98211748e1ecb0e139\",\n                            \"lessThan\": \"73124608172890306b85f2206d8b3cac20e324f1\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c38c4597e4bf3e99860eac98211748e1ecb0e139\",\n                            \"lessThan\": \"a958a4f90ddd7de0800b33ca9d7b886b7d40f74e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/netfilter/xt_cgroup.c\",\n                        \"net/netfilter/xt_rateest.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"4.5\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"4.5\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.253\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.203\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.168\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.134\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.81\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.22\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.19.12\",\n                            \"lessThanOrEqual\": \"6.19.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.0\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","score":7.1,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/bcac50ea0a29d430eedc5ac87b215393b567baa9","https://git.kernel.org/stable/c/ea01c1b219f5a11c66918abaa6f052e5a74041d6","https://git.kernel.org/stable/c/aa6cd4a8863391e0a64f62d8922cb0af732a2cf2","https://git.kernel.org/stable/c/c2d4a3abb15ca14716c6d8b9ffcbcd7c63626af4","https://git.kernel.org/stable/c/673bbd36cba21d10a10f0932f479df7468e26fbb","https://git.kernel.org/stable/c/f419bdc205894750f4d3ec042bc87a1b9cde1351","https://git.kernel.org/stable/c/73124608172890306b85f2206d8b3cac20e324f1","https://git.kernel.org/stable/c/a958a4f90ddd7de0800b33ca9d7b886b7d40f74e"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-43028","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-43028","identifiers":["CVE-2026-43028"]},"retained":false,"historicalAffected":[]}],"coverage":[]}