PT-2026-36445 · Linux · Linux Kernel

Published 2026-03-31 · Updated 2026-05-02 · CVE-2026-43028

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the netfilter x tables component where names are not properly null-terminated. This occurs when names lacking a 0 character are passed to functions expecting C-strings (strings that end with a null character to signal the end of the text).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-170

Related Identifiers

BDU:2026-06503

CVE-2026-43028

ECHO-01B2-6E7D-77CD

Affected Products

Linux Kernel

References · 22

• https://nvd.nist.gov/vuln/detail/CVE-2026-43028 · Security Note
• https://git.kernel.org/stable/c/673bbd36cba21d10a10f0932f479df7468e26fbb · Patch
• https://git.kernel.org/stable/c/bcac50ea0a29d430eedc5ac87b215393b567baa9 · Patch
• https://git.kernel.org/stable/c/73124608172890306b85f2206d8b3cac20e324f1 · Patch
• https://git.kernel.org/stable/c/ea01c1b219f5a11c66918abaa6f052e5a74041d6 · Patch
• https://git.kernel.org/stable/c/c2d4a3abb15ca14716c6d8b9ffcbcd7c63626af4 · Patch
• https://git.kernel.org/stable/c/aa6cd4a8863391e0a64f62d8922cb0af732a2cf2 · Patch
• https://git.kernel.org/stable/c/f419bdc205894750f4d3ec042bc87a1b9cde1351 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-43028 · Vendor Advisory
• https://git.kernel.org/stable/c/a958a4f90ddd7de0800b33ca9d7b886b7d40f74e · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43028 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-43028 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2026-43028 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-06503 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43028 · Vendor Advisory