CVE-2026-46163
kernel: wifi: b43legacy: enforce bounds check on firmware key index in RX path
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 28, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's b43legacy Wi-Fi driver. A remote attacker could exploit this vulnerability by sending specially crafted Wi-Fi frames, causing the firmware-controlled key index in the receive path to exceed its allocated bounds. This out-of-bounds read could lead to information disclosure from kernel memory or a denial of service.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-1285 · Improper Validation of Specified Index, Position, or Offset in Input