VYPR
← All advisories
High severity7.1NVD Advisory· Published May 6, 2026· Updated May 8, 2026

CVE-2026-43281

CVE-2026-43281

Description

In the Linux kernel, the following vulnerability has been resolved:

mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()

Although it is guided that #mbox-cells must be at least 1, there are many instances of #mbox-cells = <0>; in the device tree. If that is the case and the corresponding mailbox controller does not provide fw_xlate and of_xlate function pointers, fw_mbox_index_xlate()` will be used by default and out-of-bounds accesses could occur due to lack of bounds check in that function.

Affected products

8
  • Linux/Kernel8 versions
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=3.18.1,<6.1.167
    • cpe:2.3:o:linux:linux_kernel:3.18:-:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.18:rc2:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.18:rc3:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.18:rc4:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.18:rc5:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.18:rc6:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.18:rc7:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

News mentions

0

No linked articles in our index yet.