{"id":"CVE-2026-43141","state":"PUBLISHED","title":"ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut\n\nNumber of MW LUTs depends on NTB configuration and can be set to zero,\nin such scenario rounddown_pow_of_two will cause undefined behaviour and\nshould not be performed.\nThis patch ensures that rounddown_pow_of_two is called on valid value.","publishedAt":"2026-05-06T11:27:26.193Z","updatedAt":"2026-05-11T22:18:33.118Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"ec0467ccbdeb69a86c8729073057bda7bce00eec","status":"affected","lessThan":"d652ef399f131fcd5f8f34266167449ee7c9e5b3","versionType":"git"},{"version":"ec0467ccbdeb69a86c8729073057bda7bce00eec","status":"affected","lessThan":"5590cd04d6845c01a6bad985a491c58af6fb5389","versionType":"git"},{"version":"ec0467ccbdeb69a86c8729073057bda7bce00eec","status":"affected","lessThan":"a11d03d116eef138a7249202bd772c8e61915aec","versionType":"git"},{"version":"ec0467ccbdeb69a86c8729073057bda7bce00eec","status":"affected","lessThan":"d0559d07afabfddaaded6a61a16154486b956764","versionType":"git"},{"version":"ec0467ccbdeb69a86c8729073057bda7bce00eec","status":"affected","lessThan":"2e4d5e8d86a969318340be95470bb76e52392082","versionType":"git"},{"version":"ec0467ccbdeb69a86c8729073057bda7bce00eec","status":"affected","lessThan":"a133e3caf844a3f56b6eef89ddaa66115874f6bd","versionType":"git"},{"version":"ec0467ccbdeb69a86c8729073057bda7bce00eec","status":"affected","lessThan":"1a867d0d79a4a570a33f2f433919ad2bd7a27b67","versionType":"git"},{"version":"ec0467ccbdeb69a86c8729073057bda7bce00eec","status":"affected","lessThan":"186615f8855a0be4ee7d3fcd09a8ecc10e783b08","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/ntb/hw/mscc/ntb_hw_switchtec.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"4.15","status":"affected"},{"version":"0","status":"unaffected","lessThan":"4.15","versionType":"semver"},{"version":"5.10.252","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.202","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.165","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.128","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.75","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.16","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"6.19.6","status":"unaffected","lessThanOrEqual":"6.19.*","versionType":"semver"},{"version":"7.0","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/ntb/hw/mscc/ntb_hw_switchtec.c"]}],"references":["https://git.kernel.org/stable/c/d652ef399f131fcd5f8f34266167449ee7c9e5b3","https://git.kernel.org/stable/c/5590cd04d6845c01a6bad985a491c58af6fb5389","https://git.kernel.org/stable/c/a11d03d116eef138a7249202bd772c8e61915aec","https://git.kernel.org/stable/c/d0559d07afabfddaaded6a61a16154486b956764","https://git.kernel.org/stable/c/2e4d5e8d86a969318340be95470bb76e52392082","https://git.kernel.org/stable/c/a133e3caf844a3f56b6eef89ddaa66115874f6bd","https://git.kernel.org/stable/c/1a867d0d79a4a570a33f2f433919ad2bd7a27b67","https://git.kernel.org/stable/c/186615f8855a0be4ee7d3fcd09a8ecc10e783b08"],"weaknesses":[],"ingestedAt":"2026-10-29T20:11:57.932Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/43xxx/CVE-2026-43141.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-43141","state":"PUBLISHED","datePublished":"2026-05-06T11:27:26.193Z","dateUpdated":"2026-05-11T22:18:33.118Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2026-05-01T14:12:55.989Z"},"containers":{"cna":{"title":"ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut\n\nNumber of MW LUTs depends on NTB configuration and can be set to zero,\nin such scenario rounddown_pow_of_two will cause undefined behaviour and\nshould not be performed.\nThis patch ensures that rounddown_pow_of_two is called on valid value."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"ec0467ccbdeb69a86c8729073057bda7bce00eec","status":"affected","lessThan":"d652ef399f131fcd5f8f34266167449ee7c9e5b3","versionType":"git"},{"version":"ec0467ccbdeb69a86c8729073057bda7bce00eec","status":"affected","lessThan":"5590cd04d6845c01a6bad985a491c58af6fb5389","versionType":"git"},{"version":"ec0467ccbdeb69a86c8729073057bda7bce00eec","status":"affected","lessThan":"a11d03d116eef138a7249202bd772c8e61915aec","versionType":"git"},{"version":"ec0467ccbdeb69a86c8729073057bda7bce00eec","status":"affected","lessThan":"d0559d07afabfddaaded6a61a16154486b956764","versionType":"git"},{"version":"ec0467ccbdeb69a86c8729073057bda7bce00eec","status":"affected","lessThan":"2e4d5e8d86a969318340be95470bb76e52392082","versionType":"git"},{"version":"ec0467ccbdeb69a86c8729073057bda7bce00eec","status":"affected","lessThan":"a133e3caf844a3f56b6eef89ddaa66115874f6bd","versionType":"git"},{"version":"ec0467ccbdeb69a86c8729073057bda7bce00eec","status":"affected","lessThan":"1a867d0d79a4a570a33f2f433919ad2bd7a27b67","versionType":"git"},{"version":"ec0467ccbdeb69a86c8729073057bda7bce00eec","status":"affected","lessThan":"186615f8855a0be4ee7d3fcd09a8ecc10e783b08","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/ntb/hw/mscc/ntb_hw_switchtec.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"4.15","status":"affected"},{"version":"0","status":"unaffected","lessThan":"4.15","versionType":"semver"},{"version":"5.10.252","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.202","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.165","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.128","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.75","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.16","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"6.19.6","status":"unaffected","lessThanOrEqual":"6.19.*","versionType":"semver"},{"version":"7.0","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/ntb/hw/mscc/ntb_hw_switchtec.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/d652ef399f131fcd5f8f34266167449ee7c9e5b3"},{"url":"https://git.kernel.org/stable/c/5590cd04d6845c01a6bad985a491c58af6fb5389"},{"url":"https://git.kernel.org/stable/c/a11d03d116eef138a7249202bd772c8e61915aec"},{"url":"https://git.kernel.org/stable/c/d0559d07afabfddaaded6a61a16154486b956764"},{"url":"https://git.kernel.org/stable/c/2e4d5e8d86a969318340be95470bb76e52392082"},{"url":"https://git.kernel.org/stable/c/a133e3caf844a3f56b6eef89ddaa66115874f6bd"},{"url":"https://git.kernel.org/stable/c/1a867d0d79a4a570a33f2f433919ad2bd7a27b67"},{"url":"https://git.kernel.org/stable/c/186615f8855a0be4ee7d3fcd09a8ecc10e783b08"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T22:18:33.118Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.15","versionEndExcluding":"5.10.252"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.15","versionEndExcluding":"5.15.202"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.15","versionEndExcluding":"6.1.165"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.15","versionEndExcluding":"6.6.128"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.15","versionEndExcluding":"6.12.75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.15","versionEndExcluding":"6.18.16"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.15","versionEndExcluding":"6.19.6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.15","versionEndExcluding":"7.0"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}