CVE-2026-46122EPSS p3.0%
CVE-2026-46122CVE-2026-46122
linux / linux_kernel
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: b43: enforce bounds check on firmware key index in b43_rx()
The firmware-controlled key index in b43_rx() can exceed the dev->key[]
array size (58 entries). The existing B43_WARN_ON is non-enforcing in
production builds, allowing an out-of-bounds read.
Make the B43_WARN_ON check enforcing by dropping the frame when the
firmware returns an invalid key index.
Scoring
| CVSS | 7.8 () |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 0.13% probability of exploitation · percentile 3.0% · 2026-08-03T12:00:16Z |
| Last modified | 2026-06-24 |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.