CVE-2026-46122
- Source
- https://cve.org/CVERecord?id=CVE-2026-46122
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46122.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-46122
- Downstream
- Related
- Published
- 2026-05-28T09:35:37.141Z
- Modified
- 2026-07-08T08:13:38.639099936Z
- Summary
- wifi: b43: enforce bounds check on firmware key index in b43_rx()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
wifi: b43: enforce bounds check on firmware key index in b43_rx()
The firmware-controlled key index in b43rx() can exceed the dev->key[] array size (58 entries). The existing B43WARN_ON is non-enforcing in production builds, allowing an out-of-bounds read.
Make the B43WARNON check enforcing by dropping the frame when the firmware returns an invalid key index.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46122.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/stable/c/135cb49c9a42a02cceeac7b49ec03e267f7ed6d6
- https://git.kernel.org/stable/c/1e9e55cf66f0fa4799f4d86ef3aaba8e606b5c14
- https://git.kernel.org/stable/c/1f4f78bf8549e6ac4f04fba4176854f3a6e0c332
- https://git.kernel.org/stable/c/219ba67e69e49681e48c822d6eaafb5def032f34
- https://git.kernel.org/stable/c/3157ad40b084a8f3932da2641749ab45e99b933e
- https://git.kernel.org/stable/c/765709720e6af9a178abc40244a8d1aa39ac4e71
- https://git.kernel.org/stable/c/c3d7b90dc95020cd9282c4630e402fe224f7644e
- https://git.kernel.org/stable/c/d7029879bafdac2006c67553807d122283dc6cbf
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46122.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-46122
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducede4d6b7951812d98417feb10784e400e253caf633Fixed135cb49c9a42a02cceeac7b49ec03e267f7ed6d6Fixed3157ad40b084a8f3932da2641749ab45e99b933eFixed765709720e6af9a178abc40244a8d1aa39ac4e71Fixedc3d7b90dc95020cd9282c4630e402fe224f7644eFixed1e9e55cf66f0fa4799f4d86ef3aaba8e606b5c14Fixedd7029879bafdac2006c67553807d122283dc6cbfFixed219ba67e69e49681e48c822d6eaafb5def032f34Fixed1f4f78bf8549e6ac4f04fba4176854f3a6e0c332
Linux / Kernel
Package
- Name
- Kernel
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced2.6.24Fixed5.10.258
- Type
- ECOSYSTEM
- Events
-
Introduced5.11.0Fixed5.15.209
- Type
- ECOSYSTEM
- Events
-
Introduced5.16.0Fixed6.1.175
- Type
- ECOSYSTEM
- Events
-
Introduced6.2.0Fixed6.6.140
- Type
- ECOSYSTEM
- Events
-
Introduced6.7.0Fixed6.12.88
- Type
- ECOSYSTEM
- Events
-
Introduced6.13.0Fixed6.18.30
- Type
- ECOSYSTEM
- Events
-
Introduced6.19.0Fixed7.0.7