PT-2026-37395 · Linux · Linux Kernel
CVE-2026-43085
·
Published
2026-05-06
·
Updated
2026-07-31
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw in the netfilter nfnetlink log component allows the leakage of four bytes of stale kernel heap data to userspace. This occurs when batching multiple NFLOG messages, where the
nfulnl send() function appends an NLMSG DONE terminator using nlmsg put(). Because nlmsg put() only zeroes alignment padding and not the nfgenmsg payload itself, uninitialized data is exposed.Recommendations
Update the Linux kernel to a version where
nfnl msg put() is used to build the NLMSG DONE terminator, ensuring the nfgenmsg payload is properly initialized via nfnl fill hdr().Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel