CVE-2026-46332
kernel: greybus: gb-beagleplay: bound bootloader receive buffering
Loading…
Severity
LowRed Hat Product Security
CVSS
Review impact separately from score.
Published · June 9, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's Greybus subsystem, specifically in the gb-beagleplay driver. The cc1352_bootloader_rx() function, responsible for receiving bootloader data, does not properly check the size of incoming data chunks before copying them into a fixed-size receive buffer. This unbounded buffering can lead to an rx_buffer overflow, potentially resulting in memory corruption and a denial of service.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')