HomeDefectsLIN1023-24265
Acknowledged

LIN1023-24265 : Security Advisory - linux - CVE-2026-46122

Created: May 29, 2026    Updated: Jun 9, 2026
Found In Version: 10.23.30.2
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:  wifi: b43: enforce bounds check on firmware key index in b43_rx()  The firmware-controlled key index in b43_rx() can exceed the dev->key[] array size (58 entries). The existing B43_WARN_ON is non-enforcing in production builds, allowing an out-of-bounds read.  Make the B43_WARN_ON check enforcing by dropping the frame when the firmware returns an invalid key index.