CVE-2026-43028

A flaw was found in the Linux kernel's netfilter x_tables component. This vulnerability arises from the system's failure to ensure that certain names are properly ended with a null character before being used by functions designed for standard text strings. This oversight could lead to incorrect processing of data, potentially causing system instability or unexpected behavior.

This vulnerability is evaluated as Moderate severity for Red Hat Enterprise Linux because exploitation requires local access with CAP_NET_ADMIN privileges or access to unprivileged user namespaces to configure netfilter rules, limiting the blast radius primarily to a local denial of service. Remote unauthenticated exploitation is not possible since the flawed string handling is only invoked during local table configuration. Systems that restrict unprivileged user namespaces further limit attack surface to already-privileged administrative users.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.