CVE-2026-43145

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
06/05/2026
Last modified:
06/05/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> remoteproc: imx_rproc: Fix invalid loaded resource table detection<br /> <br /> imx_rproc_elf_find_loaded_rsc_table() may incorrectly report a loaded<br /> resource table even when the current firmware does not provide one.<br /> <br /> When the device tree contains a "rsc-table" entry, priv-&gt;rsc_table is<br /> non-NULL and denotes where a resource table would be located if one is<br /> present in memory. However, when the current firmware has no resource<br /> table, rproc-&gt;table_ptr is NULL. The function still returns<br /> priv-&gt;rsc_table, and the remoteproc core interprets this as a valid loaded<br /> resource table.<br /> <br /> Fix this by returning NULL from imx_rproc_elf_find_loaded_rsc_table() when<br /> there is no resource table for the current firmware (i.e. when<br /> rproc-&gt;table_ptr is NULL). This aligns the function&amp;#39;s semantics with the<br /> remoteproc core: a loaded resource table is only reported when a valid<br /> table_ptr exists.<br /> <br /> With this change, starting firmware without a resource table no longer<br /> triggers a crash.

Impact