PT-2026-37621

CVE-2026-43281

·

Published

2025-11-26

·

Updated

2026-10-26

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An out-of-bounds access issue exists in the fw mbox index xlate() function. This occurs when #mbox-cells is set to 0 in the device tree and the mailbox controller lacks fw xlate and of xlate function pointers, leading the system to use fw mbox index xlate() by default without proper bounds checking.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
CLSA-2026-1779375889
CLSA-2026-1788170774
CLSA-2026-1788257079
CLSA-2026-1788259625
CLSA-2026-1788449727
CLSA-2026-1792242681
CLSA-2026-1792244181
CLSA-2026-1792400260
CLSA-2026-1792980237
OESA-2026-2579
OESA-2026-2580
OPENSUSE-SU-2026:21555-1
SUSE-SU-2026:23066-1
SUSE-SU-2026:23068-1
SUSE-SU-2026:23193-1
SUSE-SU-2026:23194-1
SUSE-SU-2026:23221-1
SUSE-SU-2026:23231-1
SUSE-SU-2026:23237-1
SUSE-SU-2026:23241-1
SUSE-SU-2026:23244-1
SUSE-SU-2026:3594-1
SUSE-SU-2026:3790-1
SUSE-SU-2026:3810-1
USN-8567-1
USN-8574-1
USN-8574-2
USN-8574-3
USN-8575-1
USN-8575-2
USN-8575-3
USN-8576-1
USN-8576-2
USN-8595-1
USN-8595-2
USN-8595-3
USN-8596-1
USN-8597-1
USN-8606-1
USN-8607-1
USN-8608-1
USN-8609-1
USN-8610-1
USN-8619-1
USN-8620-1
USN-8620-2
USN-8620-3
USN-8620-4
USN-8665-1
USN-8668-1
USN-8668-2
Found an issue in the description? Have something to add? Feel free to write us 👾