CVE-2026-46016

MEDIUM

remoteproc: xlnx: Only access buffer information if IPI is buffered

Title source: cna

Description

In the Linux kernel, the following vulnerability has been resolved: remoteproc: xlnx: Only access buffer information if IPI is buffered In the receive callback check if message is NULL to prevent possibility of crash by NULL pointer dereferencing.

References (5)

Core 5

Core References

https://git.kernel.org/stable/c/5d1451cb2cf6f3d9884d76035a1460aa9bb4b053

https://git.kernel.org/stable/c/7ddbf21116770b7011f2bb0a6056b7604b24c497

https://git.kernel.org/stable/c/06d0bed2552fd0dae27d374d4492a2b672e24eed

https://git.kernel.org/stable/c/8242579859a78c801bb626e9aa4823aca93e28e7

https://git.kernel.org/stable/c/38dd6ccfdfbbe865569a52fe1ba9fa1478f672e6

Scores

CVSS v3 5.5

EPSS 0.0012

EPSS Percentile 2.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-476

Status published

Products (18)

linux/Kernel 6.13.0 - 6.18.27linux

linux/Kernel 6.19.0 - 7.0.4linux

linux/Kernel 6.4.0 - 6.6.140linux

linux/Kernel 6.7.0 - 6.12.86linux

Linux/Linux < 6.4

Linux/Linux 5dfb28c257b7c515624ba6b163410ceada451bf2 - 06d0bed2552fd0dae27d374d4492a2b672e24eed

Linux/Linux 5dfb28c257b7c515624ba6b163410ceada451bf2 - 38dd6ccfdfbbe865569a52fe1ba9fa1478f672e6

Linux/Linux 5dfb28c257b7c515624ba6b163410ceada451bf2 - 5d1451cb2cf6f3d9884d76035a1460aa9bb4b053

Linux/Linux 5dfb28c257b7c515624ba6b163410ceada451bf2 - 7ddbf21116770b7011f2bb0a6056b7604b24c497

Linux/Linux 5dfb28c257b7c515624ba6b163410ceada451bf2 - 8242579859a78c801bb626e9aa4823aca93e28e7

... and 8 more

Published May 27, 2026

Tracked Since May 27, 2026