CVE-2026-43205

A flaw was found in the Linux kernel dpaa2-switch driver. This out-of-bounds write vulnerability occurs because the driver does not validate the num_ifs value reported by the firmware against the DPSW_MAX_IF limit. A highly privileged attacker, capable of influencing the DPAA2 firmware or management complex attributes, could exploit this to trigger kernel memory corruption through flood configuration handling.

A flaw in the Linux kernel dpaa2-switch driver allows an out-of-bounds write when a firmware-reported num_ifs value is not validated against DPSW_MAX_IF. A highly privileged attacker able to influence the DPAA2 firmware or management complex attributes could trigger kernel memory corruption through flood configuration handling. For the CVSS the PR:H is used because the vulnerable value originates from firmware/device attributes rather than from an unprivileged local or remote user-controlled input.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent module fsl-dpaa2-eth from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.