CVE-2026-43281

A flaw was found in the Linux kernel. Specifically, within the mailbox subsystem, an out-of-bounds access vulnerability exists in the fw_mbox_index_xlate() function. This issue arises when the device tree is configured with #mbox-cells = <0> and the associated mailbox controller does not provide fw_xlate and of_xlate function pointers, leading to a lack of necessary bounds checks. Exploitation of this flaw could result in system instability, potentially leading to a denial of service (DoS) or information disclosure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.