High 7.1Published May 1, 2026

CVE-2026-43028netfilter: x_tables: ensure names are nul-terminated

Updated under an hour ago (Oct 26, 2026, 9:50 PM ET)

Does this affect you?

It affects Linux and 4 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: ensure names are nul-terminated Reject names that lack a \0 character before feeding them to functions that expect c-strings. Fixes tag is the most recent commit that needs this change.

CVSS: 7.1 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness (CWE): CWE-170
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from c38c4597e4bf3e99860eac98211748e1ecb0e139 before bcac50ea0a29d430eedc5ac87b215393b567baa9; from c38c4597e4bf3e99860eac98211748e1ecb0e139 before ea01c1b219f5a11c66918abaa6f052e5a74041d6; from c38c4597e4bf3e99860eac98211748e1ecb0e139 before aa6cd4a8863391e0a64f62d8922cb0af732a2cf2; from c38c4597e4bf3e99860eac98211748e1ecb0e139 before c2d4a3abb15ca14716c6d8b9ffcbcd7c63626af4; from c38c4597e4bf3e99860eac98211748e1ecb0e139 before 673bbd36cba21d10a10f0932f479df7468e26fbb; from c38c4597e4bf3e99860eac98211748e1ecb0e139 before f419bdc205894750f4d3ec042bc87a1b9cde1351; from c38c4597e4bf3e99860eac98211748e1ecb0e139 before 73124608172890306b85f2206d8b3cac20e324f1; from c38c4597e4bf3e99860eac98211748e1ecb0e139 before a958a4f90ddd7de0800b33ca9d7b886b7d40f74e	CNA record
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
linux linux_kernel linux:linux_kernel	from 4.5 before 5.10.253; from 5.11 before 5.15.203; from 5.16 before 6.1.168; from 6.2 before 6.6.134; from 6.7 before 6.12.81; from 6.13 before 6.18.22; from 6.19 before 6.19.12; 7.0; and 5 more ranges	NVD

References

References

https://git.kernel.org/stable/c/bcac50ea0a29d430eedc5ac87b215393b567baa9	patch
https://git.kernel.org/stable/c/ea01c1b219f5a11c66918abaa6f052e5a74041d6	patch
https://git.kernel.org/stable/c/aa6cd4a8863391e0a64f62d8922cb0af732a2cf2	patch
https://git.kernel.org/stable/c/c2d4a3abb15ca14716c6d8b9ffcbcd7c63626af4	patch
https://git.kernel.org/stable/c/673bbd36cba21d10a10f0932f479df7468e26fbb	patch
https://git.kernel.org/stable/c/f419bdc205894750f4d3ec042bc87a1b9cde1351	patch
https://git.kernel.org/stable/c/73124608172890306b85f2206d8b3cac20e324f1	patch
https://git.kernel.org/stable/c/a958a4f90ddd7de0800b33ca9d7b886b7d40f74e	patch
https://cert-portal.siemens.com/productcert/html/ssa-019113.html
https://cert-portal.siemens.com/productcert/html/ssa-082556.html
1–10 of 11

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.