A vulnerability labeled as critical has been found in Linux Kernel up to 6.6.135/6.12.82/6.18.23/6.19.13. Impacted is the function __nfulnl_send. Such manipulation leads to heap-based buffer overflow.

This vulnerability is uniquely identified as CVE-2026-43085. The attack can only be initiated within the local network. No exploit exists.

The affected component should be upgraded.