CVE-2026-46122

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read exists in the b43 rx() function within the b43 wifi driver. The firmware-controlled key index can exceed the size of the dev->key[] array, which contains 58 entries. Because the existing B43 WARN ON check is non-enforcing in production builds, it fails to prevent the read operation when an invalid key index is returned by the firmware.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.