What’s Vulnerable › Vulnerabilities

CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-01 · updated 2026-10-19
• Weakness: CWE-170

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: ensure names are nul-terminated Reject names that lack a \0 character before feeding them to functions that expect c-strings. Fixes tag is the most recent commit that needs this change.

Affected products

• Linux kernel: from 4.5 before 5.10.253; from 5.11 before 5.15.203; from 5.16 before 6.1.168; from 6.2 before 6.6.134; from 6.7 before 6.12.81; from 6.13 before 6.18.22 — fixed in 5.10.253, 5.15.203, 6.1.168, 6.12.81, 6.18.22, 6.19.12

How to fix

Upgrade to a fixed version: Linux kernel 5.10.253, 5.15.203, 6.1.168, 6.12.81. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/673bbd36cba21d10a10f0932f479df7468e26fbb
• https://git.kernel.org/stable/c/73124608172890306b85f2206d8b3cac20e324f1
• https://git.kernel.org/stable/c/a958a4f90ddd7de0800b33ca9d7b886b7d40f74e
• https://git.kernel.org/stable/c/aa6cd4a8863391e0a64f62d8922cb0af732a2cf2
• https://git.kernel.org/stable/c/bcac50ea0a29d430eedc5ac87b215393b567baa9
• https://git.kernel.org/stable/c/c2d4a3abb15ca14716c6d8b9ffcbcd7c63626af4
• https://git.kernel.org/stable/c/ea01c1b219f5a11c66918abaa6f052e5a74041d6
• https://git.kernel.org/stable/c/f419bdc205894750f4d3ec042bc87a1b9cde1351
• https://cert-portal.siemens.com/productcert/html/ssa-019113.html
• https://cert-portal.siemens.com/productcert/html/ssa-082556.html
• https://cert-portal.siemens.com/productcert/html/ssa-457936.html

Get alerted when CVE-2026-43028 or the next vulnerability affects your stack