CVE-2026-43082 net: txgbe: leave space for null terminators on property_entry
The txgbe network driver failed to allocate space for null terminators in property entries, potentially causing memory issues.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-43082?
CVE-2026-43082 is a medium-severity vulnerability in Linux kernel, published on 6 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
net: txgbe: leave space for null terminators on property_entry
Lists of struct property_entry are supposed to be terminated with an empty property, this driver currently seems to be allocating exactly the amount of entry used.
Change the struct definition to leave an extra element for all property_entry.
Which versions are affected by CVE-2026-43082?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-43082?
Apply the vendor's patch.
Is CVE-2026-43082 being exploited?
There is no known exploitation of CVE-2026-43082 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2026-43082, DEBIAN-CVE-2026-43082, GHSA-p83h-5v8g-jhp9, ROOT-OS-UBUNTU-2404-CVE-2026-43082, UBUNTU-CVE-2026-43082.