PT-2026-37621 · Linux · Linux Kernel

CVE-2026-43281

·

Published

2026-05-06

·

Updated

2026-07-24

CVSS v3.1

7.1

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An out-of-bounds access issue exists in the fw mbox index xlate() function. This occurs when #mbox-cells is set to 0 in the device tree and the mailbox controller lacks fw xlate and of xlate function pointers, leading the system to use fw mbox index xlate() by default without proper bounds checking.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-43281
OESA-2026-2579
OESA-2026-2580
USN-8567-1
USN-8574-1
USN-8574-2
USN-8575-1
USN-8575-2
USN-8575-3
USN-8576-1
USN-8576-2
USN-8595-1
USN-8595-2
USN-8596-1
USN-8597-1
USN-8606-1
USN-8607-1
USN-8608-1
USN-8609-1
USN-8610-1

Affected Products

Linux Kernel