CVE-2026-46016
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
A vulnerability in the Linux kernel has been resolved, affecting the remoteproc component in the context of xlnx. The issue was the lack of a check for NULL messages, which could lead to crashes due to NULL pointer dereferencing.
Risk Assessment
Organizations may be exposed to system crashes, potentially leading to downtime and data loss. If exploited, an attacker could cause unexpected system behavior.
Recommendation
It is recommended to update the Linux kernel to the latest version to mitigate this vulnerability. Additionally, systems should be monitored for unauthorized activities.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: remoteproc: xlnx: Only access buffer information if IPI is buffered In the receive callback check if message is NULL to prevent possibility of crash by NULL pointer dereferencing.