CVE-2026-43281
- Source
- https://cve.org/CVERecord?id=CVE-2026-43281
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43281.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2026-43281
- Downstream
- Published
- 2026-05-06T11:29:02.278Z
- Modified
- 2026-06-03T03:54:51.374296149Z
- Summary
- mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
mailbox: Prevent out-of-bounds access in fwmboxindex_xlate()
Although it is guided that
#mbox-cellsmust be at least 1, there are many instances of#mbox-cells = <0>;in the device tree. If that is the case and the corresponding mailbox controller does not providefw_xlateand ofxlatefunction pointers,fwmboxindexxlate()` will be used by default and out-of-bounds accesses could occur due to lack of bounds check in that function. - Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43281.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/stable/c/01d9a8c2615d436b2b30c19c1afe9fcd5726ff6d
- https://git.kernel.org/stable/c/2662ed331a69c0b551f78af58f12eb629a89a36f
- https://git.kernel.org/stable/c/2c7ff651ec6b660c7c96a36db9328b3232f555d8
- https://git.kernel.org/stable/c/31c4c67dec3362094a6747a171a4848e98542265
- https://git.kernel.org/stable/c/4caae8168d1b808c7d4ff481295292e3f97f90fb
- https://git.kernel.org/stable/c/ec0874447895b994182a962d2fee9ef075de5efd
- https://git.kernel.org/stable/c/f50b39fd7c72a8734153644ee945ca0d8b2e65ab
- https://git.kernel.org/stable/c/fcd7f96c783626c07ee3ed75fa3739a8a2052310
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43281.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-43281
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced2b6d83e2b8b7de82331a6a1dcd64b51020a6031cFixed2c7ff651ec6b660c7c96a36db9328b3232f555d8Fixedec0874447895b994182a962d2fee9ef075de5efdFixed2662ed331a69c0b551f78af58f12eb629a89a36fFixed31c4c67dec3362094a6747a171a4848e98542265Fixed01d9a8c2615d436b2b30c19c1afe9fcd5726ff6dFixed4caae8168d1b808c7d4ff481295292e3f97f90fbFixedf50b39fd7c72a8734153644ee945ca0d8b2e65abFixedfcd7f96c783626c07ee3ed75fa3739a8a2052310
Linux / Kernel
Package
- Name
- Kernel
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced3.18.0Fixed5.10.258
- Type
- ECOSYSTEM
- Events
-
Introduced5.11.0Fixed5.15.209
- Type
- ECOSYSTEM
- Events
-
Introduced5.16.0Fixed6.1.167
- Type
- ECOSYSTEM
- Events
-
Introduced6.2.0Fixed6.6.130
- Type
- ECOSYSTEM
- Events
-
Introduced6.7.0Fixed6.12.77
- Type
- ECOSYSTEM
- Events
-
Introduced6.13.0Fixed6.18.16
- Type
- ECOSYSTEM
- Events
-
Introduced6.19.0Fixed6.19.6