Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2026-43028

netfilter: x_tables: ensure names are nul-terminated

CVSS 7.1 HighEPSS 0.0013 · 2nd percentile

Published by the CVE Program (CNA: Linux) at 1 May 2026, 14:15 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected c38c4597e4bf3e99860eac98211748e1ecb0e139 to before bcac50ea0a29d430eedc5ac87b215393b567baa9 git
  • affected c38c4597e4bf3e99860eac98211748e1ecb0e139 to before ea01c1b219f5a11c66918abaa6f052e5a74041d6 git
  • affected c38c4597e4bf3e99860eac98211748e1ecb0e139 to before aa6cd4a8863391e0a64f62d8922cb0af732a2cf2 git
  • affected c38c4597e4bf3e99860eac98211748e1ecb0e139 to before c2d4a3abb15ca14716c6d8b9ffcbcd7c63626af4 git
  • affected c38c4597e4bf3e99860eac98211748e1ecb0e139 to before 673bbd36cba21d10a10f0932f479df7468e26fbb git
  • affected c38c4597e4bf3e99860eac98211748e1ecb0e139 to before f419bdc205894750f4d3ec042bc87a1b9cde1351 git
  • affected c38c4597e4bf3e99860eac98211748e1ecb0e139 to before 73124608172890306b85f2206d8b3cac20e324f1 git
  • affected c38c4597e4bf3e99860eac98211748e1ecb0e139 to before a958a4f90ddd7de0800b33ca9d7b886b7d40f74e git
Other versions: unaffected
Linux Linux
  • affected 4.5
  • unaffected before 4.5 semver
  • unaffected 5.10.253 to 5.10.*, inclusive semver
  • unaffected 5.15.203 to 5.15.*, inclusive semver
  • unaffected 6.1.168 to 6.1.*, inclusive semver
  • unaffected 6.6.134 to 6.6.*, inclusive semver
  • unaffected 6.12.81 to 6.12.*, inclusive semver
  • unaffected 6.18.22 to 6.18.*, inclusive semver
  • unaffected 6.19.12 to 6.19.*, inclusive semver
  • unaffected 7.0 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-43028
CNA
Linux
Weakness (CWE)
CWE-170
Tags
Published
1 May 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

ScoreRatingCVSSVectorSource
7.1 High 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CNA (Linux)
  • CISA KEV Not listed.
  • EPSS 0.0013, the 2nd percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 1 May 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.