CVE-2026-46163
HIGHwifi: b43legacy: enforce bounds check on firmware key index in RX path
Title source: cnaDescription
In the Linux kernel, the following vulnerability has been resolved: wifi: b43legacy: enforce bounds check on firmware key index in RX path Same fix as b43: the firmware-controlled key index in b43legacy_rx() can exceed dev->max_nr_keys. The existing B43legacy_WARN_ON is non-enforcing in production builds, allowing an out-of-bounds read of dev->key[]. Make the check enforcing by dropping the frame for invalid indices.
References (8)
Core 8
Core References
Scores
CVSS v3
7.8
EPSS
0.0014
EPSS Percentile
3.5%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-129
Status
published
Products (21)
Linux/Linux
< 2.6.24
Linux/Linux
2.6.24
Linux/Linux
5.10.258 - 5.10.*
Linux/Linux
5.15.209 - 5.15.*
Linux/Linux
6.1.175 - 6.1.*
Linux/Linux
6.12.88 - 6.12.*
Linux/Linux
6.18.30 - 6.18.*
Linux/Linux
6.6.140 - 6.6.*
Linux/Linux
7.0.7 - 7.0.*
Linux/Linux
7.1
... and 11 more
Published
May 28, 2026
Tracked Since
May 28, 2026