Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-46163

wifi: b43legacy: enforce bounds check on firmware key index in RX path

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: b43legacy: enforce bounds check on firmware key index in RX path Same fix as b43: the firmware-controlled key index in b43legacy_rx() can exceed dev->max_nr_keys. The existing B43legacy_WARN_ON is non-enforcing in production builds, allowing an out-of-bounds read of dev->key[]. Make the check enforcing by dropping the frame for invalid indices.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 75388acd0cd827dc1498043daa7d1c760902cd67 to < a92bd0503df2488f2cc040f329ebccff1c1934cbaffected
  • 75388acd0cd827dc1498043daa7d1c760902cd67 to < df805c1d085b7a96077f0964185764c87060950daffected
  • 75388acd0cd827dc1498043daa7d1c760902cd67 to < 4242db36de99de734cc1f60e5edd86cda7e598c6affected
  • 75388acd0cd827dc1498043daa7d1c760902cd67 to < 1baaeb6adecb9691748c0253dab6ddd19a2b4e9eaffected
  • 75388acd0cd827dc1498043daa7d1c760902cd67 to < 6ee946077607d7783ae6709a899213fc4fe08f35affected
  • 75388acd0cd827dc1498043daa7d1c760902cd67 to < 9d1bc155802943e92c57a5fb923d23edfbf0b525affected
  • 75388acd0cd827dc1498043daa7d1c760902cd67 to < fdd4e51979f42ca8b1ab7e6176b607e1caabf2a5affected
  • 75388acd0cd827dc1498043daa7d1c760902cd67 to < a035766f970bde2d4298346a31a80685be5c0205affected

Linux Linux

Default version status: affected

  • 2.6.24affected
  • 0 to < 2.6.24unaffected
  • 5.10.258 to ≤ 5.10.*unaffected
  • 5.15.209 to ≤ 5.15.*unaffected
  • 6.1.175 to ≤ 6.1.*unaffected
  • 6.6.140 to ≤ 6.6.*unaffected
  • 6.12.88 to ≤ 6.12.*unaffected
  • 6.18.30 to ≤ 6.18.*unaffected
  • 7.0.7 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References