CVE Database›Document archive›CVE-2026-46332

CVE-2026-46332

kernel: greybus: gb-beagleplay: bound bootloader receive buffering

Loading…

Severity

Low

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 9, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's Greybus subsystem, specifically in the gb-beagleplay driver. The cc1352_bootloader_rx() function, responsible for receiving bootloader data, does not properly check the size of incoming data chunks before copying them into a fixed-size receive buffer. This unbounded buffering can lead to an rx_buffer overflow, potentially resulting in memory corruption and a denial of service.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')