CVE-2026-43028

Vulnerability

CVE-2026-43028 is a high-severity vulnerability in the Linux kernel's netfilter subsystem, specifically in the x_tables module. The flaw occurs because the kernel does not verify that table name validation without ensuring the name string is properly nul-terminated before passing it to functions that expect C-strings. This can lead to buffer over-read or information disclosure if a crafted table name lacking a null byte is provided.

Exploitation

An attacker with the ability to create or manipulate netfilter rules (typically requiring root or CAP_NET_ADMIN) can supply a table name that is not nul-terminated. When the kernel processes this name, functions like strcmp or strlen may read beyond the intended buffer, potentially leaking kernel memory. No network-based attack vector is described; local access with sufficient privileges is required.

Impact

Successful exploitation could allow an attacker to read sensitive kernel memory (information disclosure) or potentially cause a denial of service. The CVSS v3 score of 7.1 reflects the high reflects the potential for confidentiality impact. The vulnerability does not directly enable privilege escalation or remote code execution based on the available information.

Mitigation

The fix has been applied to the Linux kernel stable tree via commits [1], [2], [3], and [4]. Users should update to a kernel version containing these patches. No workaround is mentioned; the only mitigation is to apply the kernel update.