CVE-2026-43082

net: txgbe: leave space for null terminators on property_entry

MEDIUM
5.5
CVSS Score
Published: May 6, 2026 at 07:40 AM UTC
Updated: June 17, 2026 at 10:48 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: leave space for null terminators on property_entry Lists of struct property_entry are supposed to be terminated with an empty property, this driver currently seems to be allocating exactly the amount of entry used. Change the struct definition to leave an extra element for all property_entry.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

6.13 ≤ v < 6.18.246.19 ≤ v < 6.19.146.5 ≤ v < 6.12.836.5 ≤ v < 6.18.246.5 ≤ v < 6.19.146.5 ≤ v < 6.6.1366.5 ≤ v < 7.06.7 ≤ v < 6.12.837.0 rc17.0 rc27.0 rc37.0 rc47.0 rc57.0 rc67.0 rc7c3e382ad6d15a8041ab8a168ad3ff90137ee8a45
Vendor states this is fixed in 00e1d650fa4b228ef1faea8e29effe4b4861e6e4 (fixed)
Vendor states this is fixed in 16eb3c2f86de9a21aefe7a6386607d4cd3947a77 (fixed)
Vendor states this is fixed in 5a37d228799b0ec2c277459c83c814a59d310bc3 (fixed)
Vendor states this is fixed in 8eff73e58e1f8fe991522acb863164319a7f7dd3 (fixed)
Vendor states this is fixed in 92c09262dac565a6b831fd724b81fe4ff76f51b4 (fixed)
Vendor states this is fixed in 6.12.83 (unaffected)
Vendor states this is fixed in 6.18.24 (unaffected)
Vendor states this is fixed in 6.19.14 (unaffected)
Vendor states this is fixed in 6.5 (unaffected)
Vendor states this is fixed in 6.6.136 (unaffected)
Vendor states this is fixed in 7.0 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card