THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-43085 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator When batching multiple NFLOG messages (inst->qlen > 1), __nfulnl_send() appends an NLMSG_DONE terminator with sizeof(struct nfgenmsg) paylo

[NVD] CVE-2026-43085 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator When batching multiple NFLOG messages (inst->qlen > 1), __nfulnl_send() appends an NLMSG_DONE terminator with sizeof(struct nfgenmsg) paylo

lownvdPublished 2026-05-06

CVE-2026-43085 CVSS: 5.5 MEDIUM Published: 2026-05-06T10:16:21.720

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator

When batching multiple NFLOG messages (inst->qlen > 1), __nfulnl_send() appends an NLMSG_DONE terminator with sizeof(struct nfgenmsg) payload via nlmsg_put(), but never initializes the nfgenm

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-43085