CVE-2026-43141

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-43141
In the Linux kernel, the following vulnerability has been resolved: ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut Number of MW LUTs depends on NTB configuration and can be set to zero, in such scenario rounddown_pow_of_two will cause undefined behaviour and should not be performed. This patch ensures that rounddown_pow_of_two is called on valid value.

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/186615f8855a0be4ee7d3fcd09a8ecc10e783b08 Patch
https://git.kernel.org/stable/c/1a867d0d79a4a570a33f2f433919ad2bd7a27b67 Patch
https://git.kernel.org/stable/c/2e4d5e8d86a969318340be95470bb76e52392082 Patch
https://git.kernel.org/stable/c/5590cd04d6845c01a6bad985a491c58af6fb5389 Patch
https://git.kernel.org/stable/c/a11d03d116eef138a7249202bd772c8e61915aec Patch
https://git.kernel.org/stable/c/a133e3caf844a3f56b6eef89ddaa66115874f6bd Patch
https://git.kernel.org/stable/c/d0559d07afabfddaaded6a61a16154486b956764 Patch
https://git.kernel.org/stable/c/d652ef399f131fcd5f8f34266167449ee7c9e5b3 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

13 May 2026, 20:52

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
CWE CWE-125
References () https://git.kernel.org/stable/c/186615f8855a0be4ee7d3fcd09a8ecc10e783b08 - () https://git.kernel.org/stable/c/186615f8855a0be4ee7d3fcd09a8ecc10e783b08 - Patch
References () https://git.kernel.org/stable/c/1a867d0d79a4a570a33f2f433919ad2bd7a27b67 - () https://git.kernel.org/stable/c/1a867d0d79a4a570a33f2f433919ad2bd7a27b67 - Patch
References () https://git.kernel.org/stable/c/2e4d5e8d86a969318340be95470bb76e52392082 - () https://git.kernel.org/stable/c/2e4d5e8d86a969318340be95470bb76e52392082 - Patch
References () https://git.kernel.org/stable/c/5590cd04d6845c01a6bad985a491c58af6fb5389 - () https://git.kernel.org/stable/c/5590cd04d6845c01a6bad985a491c58af6fb5389 - Patch
References () https://git.kernel.org/stable/c/a11d03d116eef138a7249202bd772c8e61915aec - () https://git.kernel.org/stable/c/a11d03d116eef138a7249202bd772c8e61915aec - Patch
References () https://git.kernel.org/stable/c/a133e3caf844a3f56b6eef89ddaa66115874f6bd - () https://git.kernel.org/stable/c/a133e3caf844a3f56b6eef89ddaa66115874f6bd - Patch
References () https://git.kernel.org/stable/c/d0559d07afabfddaaded6a61a16154486b956764 - () https://git.kernel.org/stable/c/d0559d07afabfddaaded6a61a16154486b956764 - Patch
References () https://git.kernel.org/stable/c/d652ef399f131fcd5f8f34266167449ee7c9e5b3 - () https://git.kernel.org/stable/c/d652ef399f131fcd5f8f34266167449ee7c9e5b3 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1

06 May 2026, 12:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-06 12:16

Updated : 2026-05-13 20:52

NVD link : CVE-2026-43141

Mitre link : CVE-2026-43141

CVE.ORG link : CVE-2026-43141

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-125

Out-of-bounds Read