CVE-2026-46163
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A vulnerability has been identified in the Linux kernel within the b43legacy module, allowing the firmware-controlled key index in the RX path to exceed the allowed range. The fix enforces a bounds check to prevent out-of-bounds reads.
Risk Assessment
Organizations may be exposed to unauthorized data access, potentially leading to serious security breaches. Exploitation of this vulnerability could result in loss of information confidentiality.
Recommendation
It is recommended to update the Linux kernel to the latest version to implement the fix that eliminates this vulnerability. Additionally, systems should be monitored for unauthorized access.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: wifi: b43legacy: enforce bounds check on firmware key index in RX path Same fix as b43: the firmware-controlled key index in b43legacy_rx() can exceed dev->max_nr_keys. The existing B43legacy_WARN_ON is non-enforcing in production builds, allowing an out-of-bounds read of dev->key[]. Make the check enforcing by dropping the frame for invalid indices.