CVE-2026-43281

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
06/05/2026
Last modified:
06/05/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()<br /> <br /> Although it is guided that `#mbox-cells` must be at least 1, there are<br /> many instances of `#mbox-cells = ;` in the device tree. If that is<br /> the case and the corresponding mailbox controller does not provide<br /> `fw_xlate` and of_xlate` function pointers, `fw_mbox_index_xlate()` will<br /> be used by default and out-of-bounds accesses could occur due to lack of<br /> bounds check in that function.

Impact