CVE-2026-43110

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-43110
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: validate bsscfg indices in IF events brcmf_fweh_handle_if_event() validates the firmware-provided interface index before it touches drvr->iflist[], but it still uses the raw bsscfgidx field as an array index without a matching range check. Reject IF events whose bsscfg index does not fit in drvr->iflist[] before indexing the interface array. [add missing wifi prefix]

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1ae1e1caa428844e481231f6dbe9b4f475f1d52d Patch
https://git.kernel.org/stable/c/2ae3ccb78c0a9ef5ee3d80d02ab319ac1d5af734
https://git.kernel.org/stable/c/304950a467d83678bd0b0f46331882e2ac23b12d Patch
https://git.kernel.org/stable/c/3ec7437e9d11374105c2c4e47ae671537729d7e6 Patch
https://git.kernel.org/stable/c/9c81bcc2c695e0082012a2a3d36a0eefaa51579c
https://git.kernel.org/stable/c/9fca68c2512a362cad258e4df12a307bb2ee4b8e Patch
https://git.kernel.org/stable/c/b329fbcf075949a038045d8e9b86ae3d5bbd8a54
https://git.kernel.org/stable/c/b427c2b05222db36d32ee141609de6128e9091bb Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*
History

01 Jun 2026, 17:17

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/2ae3ccb78c0a9ef5ee3d80d02ab319ac1d5af734 -
  • () https://git.kernel.org/stable/c/9c81bcc2c695e0082012a2a3d36a0eefaa51579c -
  • () https://git.kernel.org/stable/c/b329fbcf075949a038045d8e9b86ae3d5bbd8a54 -

08 May 2026, 20:14

Type Values Removed Values Added
CWE NVD-CWE-noinfo
CPE cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/1ae1e1caa428844e481231f6dbe9b4f475f1d52d - () https://git.kernel.org/stable/c/1ae1e1caa428844e481231f6dbe9b4f475f1d52d - Patch
References () https://git.kernel.org/stable/c/304950a467d83678bd0b0f46331882e2ac23b12d - () https://git.kernel.org/stable/c/304950a467d83678bd0b0f46331882e2ac23b12d - Patch
References () https://git.kernel.org/stable/c/3ec7437e9d11374105c2c4e47ae671537729d7e6 - () https://git.kernel.org/stable/c/3ec7437e9d11374105c2c4e47ae671537729d7e6 - Patch
References () https://git.kernel.org/stable/c/9fca68c2512a362cad258e4df12a307bb2ee4b8e - () https://git.kernel.org/stable/c/9fca68c2512a362cad258e4df12a307bb2ee4b8e - Patch
References () https://git.kernel.org/stable/c/b427c2b05222db36d32ee141609de6128e9091bb - () https://git.kernel.org/stable/c/b427c2b05222db36d32ee141609de6128e9091bb - Patch

08 May 2026, 13:16

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 8.8

06 May 2026, 10:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-06 10:16

Updated : 2026-06-01 17:17

NVD link : CVE-2026-43110

Mitre link : CVE-2026-43110

CVE.ORG link : CVE-2026-43110

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo