Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-46122

In the Linux kernel, the following vulnerability has been resolved: wifi: b43: enforce bounds check on firmware key index in b43_rx() The firmware-controlled key index in b43_rx() can exceed the dev->key[] array size (58 entries). The existing B43_WARN_ON is non-enforcing in production builds, allowing an out-of-bounds read. Make the B43_WARN_ON check enforcing by dropping the frame when the firmware returns an invalid key index.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:ca224cec4f402c95b9056bf25569206d45bc349649d93f8b684ac915b7cee714
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/wireless/broadcom/b43/xmit.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.24"},{"lessThan":"2.6.24","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionTy…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:e3d49b5c8cbfb83f91762027d2af6d74c1315a6497e5de70a40930db33339904 · sha256:a470a68f5b833024… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/wireless/broadcom/b43/xmit.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"135cb49c9a42a02cceeac7b49ec03e267f7ed6d6","status":"affected","version":"e4d6b7951812d98417feb10784e400e253caf633","versionType":"git"},{"lessThan":"3157ad40b084a8f3932da2641749ab45e99b933e","status":"affected","version":"e4d6b7951812d98417feb10784e400e253caf633","versionType":"git"},{"lessThan":"765709720e6af9a178abc40244a8d1aa39ac4e71","status":"affected","version":"e4d6b…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:e3d49b5c8cbfb83f91762027d2af6d74c1315a6497e5de70a40930db33339904 · sha256:a470a68f5b833024… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/wireless/broadcom/b43/xmit.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.24"},{"lessThan":"2.6.24","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionTy…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:e3d49b5c8cbfb83f91762027d2af6d74c1315a6497e5de70a40930db33339904 · sha256:a470a68f5b833024… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/wireless/broadcom/b43/xmit.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"135cb49c9a42a02cceeac7b49ec03e267f7ed6d6","status":"affected","version":"e4d6b7951812d98417feb10784e400e253caf633","versionType":"git"},{"lessThan":"3157ad40b084a8f3932da2641749ab45e99b933e","status":"affected","version":"e4d6b7951812d98417feb10784e400e253caf633","versionType":"git"},{"lessThan":"765709720e6af9a178abc40244a8d1aa39ac4e71","status":"affected","version":"e4d6b…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:e3d49b5c8cbfb83f91762027d2af6d74c1315a6497e5de70a40930db33339904 · sha256:a470a68f5b833024… · /containers/cna/affected/0

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/135cb49c9a42a02cceeac7b49ec03e267f7ed6d6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e3d49b5c8cbfb83f91762027d2af6d74c1315a6497e5de70a40930db33339904 · sha256:a470a68f5b833024… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/1e9e55cf66f0fa4799f4d86ef3aaba8e606b5c14"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e3d49b5c8cbfb83f91762027d2af6d74c1315a6497e5de70a40930db33339904 · sha256:a470a68f5b833024… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/1f4f78bf8549e6ac4f04fba4176854f3a6e0c332"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e3d49b5c8cbfb83f91762027d2af6d74c1315a6497e5de70a40930db33339904 · sha256:a470a68f5b833024… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/219ba67e69e49681e48c822d6eaafb5def032f34"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e3d49b5c8cbfb83f91762027d2af6d74c1315a6497e5de70a40930db33339904 · sha256:a470a68f5b833024… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/3157ad40b084a8f3932da2641749ab45e99b933e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e3d49b5c8cbfb83f91762027d2af6d74c1315a6497e5de70a40930db33339904 · sha256:a470a68f5b833024… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/765709720e6af9a178abc40244a8d1aa39ac4e71"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e3d49b5c8cbfb83f91762027d2af6d74c1315a6497e5de70a40930db33339904 · sha256:a470a68f5b833024… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/c3d7b90dc95020cd9282c4630e402fe224f7644e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e3d49b5c8cbfb83f91762027d2af6d74c1315a6497e5de70a40930db33339904 · sha256:a470a68f5b833024… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/d7029879bafdac2006c67553807d122283dc6cbf"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e3d49b5c8cbfb83f91762027d2af6d74c1315a6497e5de70a40930db33339904 · sha256:a470a68f5b833024… · /containers/cna/references/5

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer