CVE-2026-43241

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-43241
In the Linux kernel, the following vulnerability has been resolved: ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access Number of MW LUTs depends on NTB configuration and can be set to MAX_MWS, This patch protects against invalid index out of bounds access to mw_sizes When invalid access print message to user that configuration is not valid.

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0e930420945106151c6eb3d7837b4e6154e9b144 Patch
https://git.kernel.org/stable/c/2346856b74823a2a78109002e479a3d02526a9ce Patch
https://git.kernel.org/stable/c/348e1ac9ad983ed7e62de14e1daf47f1695a4ce9 Patch
https://git.kernel.org/stable/c/47ce292dd45dc689747c40603222691638919189 Patch
https://git.kernel.org/stable/c/740945de896021b9a859e71f38f6aea72a6393cf Patch
https://git.kernel.org/stable/c/85c9daa1f8319bbb3dfee71dc6a2f969cd3b4c92 Patch
https://git.kernel.org/stable/c/c8ba7ad2cc1c7b90570aa347b8ebbe279f1eface Patch
https://git.kernel.org/stable/c/ee02c4f980c91820845dd8e469ec7dc670ab6d9d Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

11 May 2026, 14:26

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1
CWE CWE-125
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/0e930420945106151c6eb3d7837b4e6154e9b144 - () https://git.kernel.org/stable/c/0e930420945106151c6eb3d7837b4e6154e9b144 - Patch
References () https://git.kernel.org/stable/c/2346856b74823a2a78109002e479a3d02526a9ce - () https://git.kernel.org/stable/c/2346856b74823a2a78109002e479a3d02526a9ce - Patch
References () https://git.kernel.org/stable/c/348e1ac9ad983ed7e62de14e1daf47f1695a4ce9 - () https://git.kernel.org/stable/c/348e1ac9ad983ed7e62de14e1daf47f1695a4ce9 - Patch
References () https://git.kernel.org/stable/c/47ce292dd45dc689747c40603222691638919189 - () https://git.kernel.org/stable/c/47ce292dd45dc689747c40603222691638919189 - Patch
References () https://git.kernel.org/stable/c/740945de896021b9a859e71f38f6aea72a6393cf - () https://git.kernel.org/stable/c/740945de896021b9a859e71f38f6aea72a6393cf - Patch
References () https://git.kernel.org/stable/c/85c9daa1f8319bbb3dfee71dc6a2f969cd3b4c92 - () https://git.kernel.org/stable/c/85c9daa1f8319bbb3dfee71dc6a2f969cd3b4c92 - Patch
References () https://git.kernel.org/stable/c/c8ba7ad2cc1c7b90570aa347b8ebbe279f1eface - () https://git.kernel.org/stable/c/c8ba7ad2cc1c7b90570aa347b8ebbe279f1eface - Patch
References () https://git.kernel.org/stable/c/ee02c4f980c91820845dd8e469ec7dc670ab6d9d - () https://git.kernel.org/stable/c/ee02c4f980c91820845dd8e469ec7dc670ab6d9d - Patch

06 May 2026, 12:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-06 12:16

Updated : 2026-05-11 14:26

NVD link : CVE-2026-43241

Mitre link : CVE-2026-43241

CVE.ORG link : CVE-2026-43241

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-125

Out-of-bounds Read