CVE-2026-43495
kernel: net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 21, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel, specifically within the net: wwan: t7xx module. A malicious modem could exploit this vulnerability by sending a specially crafted message with an invalid port_count value. This could lead to a slab-out-of-bounds read, potentially allowing an attacker to access sensitive information or cause a system crash (Denial of Service).
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-1284 · Improper Validation of Specified Quantity in Input