Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-46122

wifi: b43: enforce bounds check on firmware key index in b43_rx()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: b43: enforce bounds check on firmware key index in b43_rx() The firmware-controlled key index in b43_rx() can exceed the dev->key[] array size (58 entries). The existing B43_WARN_ON is non-enforcing in production builds, allowing an out-of-bounds read. Make the B43_WARN_ON check enforcing by dropping the frame when the firmware returns an invalid key index.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e4d6b7951812d98417feb10784e400e253caf633 to < 135cb49c9a42a02cceeac7b49ec03e267f7ed6d6affected
  • e4d6b7951812d98417feb10784e400e253caf633 to < 3157ad40b084a8f3932da2641749ab45e99b933eaffected
  • e4d6b7951812d98417feb10784e400e253caf633 to < 765709720e6af9a178abc40244a8d1aa39ac4e71affected
  • e4d6b7951812d98417feb10784e400e253caf633 to < c3d7b90dc95020cd9282c4630e402fe224f7644eaffected
  • e4d6b7951812d98417feb10784e400e253caf633 to < 1e9e55cf66f0fa4799f4d86ef3aaba8e606b5c14affected
  • e4d6b7951812d98417feb10784e400e253caf633 to < d7029879bafdac2006c67553807d122283dc6cbfaffected
  • e4d6b7951812d98417feb10784e400e253caf633 to < 219ba67e69e49681e48c822d6eaafb5def032f34affected
  • e4d6b7951812d98417feb10784e400e253caf633 to < 1f4f78bf8549e6ac4f04fba4176854f3a6e0c332affected

Linux Linux

Default version status: affected

  • 2.6.24affected
  • 0 to < 2.6.24unaffected
  • 5.10.258 to ≤ 5.10.*unaffected
  • 5.15.209 to ≤ 5.15.*unaffected
  • 6.1.175 to ≤ 6.1.*unaffected
  • 6.6.140 to ≤ 6.6.*unaffected
  • 6.12.88 to ≤ 6.12.*unaffected
  • 6.18.30 to ≤ 6.18.*unaffected
  • 7.0.7 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References