PT-2026-37395 · Linux · Linux Kernel

Published 2026-05-06 · Updated 2026-05-06 · CVE-2026-43085

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw in the netfilter nfnetlink log component allows the leakage of four bytes of stale kernel heap data to userspace. This occurs when batching multiple NFLOG messages, where the nfulnl send() function appends an NLMSG DONE terminator using nlmsg put(). Because nlmsg put() only zeroes alignment padding and not the nfgenmsg payload itself, uninitialized data is exposed.

Recommendations Update the Linux kernel to a version where nfnl msg put() is used to build the NLMSG DONE terminator, ensuring the nfgenmsg payload is properly initialized via nfnl fill hdr().

Related Identifiers

CVE-2026-43085

Affected Products

Linux Kernel

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-43085 · Security Note
• https://git.kernel.org/stable/c/1f3083aec8836213da441270cdb1ab612dd82cf4 · Note
• https://twitter.com/vuldb/status/2051978571779096798 · Twitter Post
• https://git.kernel.org/stable/c/15d209bccf9273b4a8b4e579ba0e92d065b6ec8c · Note
• https://git.kernel.org/stable/c/d1399632ba255d2e02c757af5d9f5d9279ce168c · Note
• https://git.kernel.org/stable/c/368c22aea490f6f50df831b4f9e3623787686c5b · Note
• https://git.kernel.org/stable/c/d552bcfca323d175664d7444989b04f55666978a · Note