NetSight
IP …
high7.1

CVE-2026-43281

In the Linux kernel, the following vulnerability has been resolved: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() Although it is guided that `…

Impact

In the Linux kernel, the following vulnerability has been resolved: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() Although it is guided that `#mbox-cells` must be at least 1, there are many instances of `#mbox-cells = <0>;` in the device tree. If that is the case and the corresponding mailbox controller does not provide `fw_xlate` and of_xlate` function pointers, `fw_mbox_index_xlate()` will be used by default and out-of-bounds accesses could occur due to lack of bounds check in that function.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.18.1 before 6.1.167
from 6.2 before 6.6.130
from 6.7 before 6.12.77
from 6.13 before 6.18.16
from 6.19 before 6.19.6
Version 3.18

Weakness classification

CWE-125

References