CVE-2026-43145

remoteproc: imx_rproc: Fix invalid loaded resource table detection

published May 6, 2026

CVSS
—
EPSS
0%
Percentile
5.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

remoteproc: imx_rproc: Fix invalid loaded resource table detection

imx_rproc_elf_find_loaded_rsc_table() may incorrectly report a loaded

resource table even when the current firmware does not provide one.

When the device tree contains a "rsc-table" entry, priv->rsc_table is

non-NULL and denotes where a resource table would be located if one is

present in memory. However, when the current firmware has no resource

table, rproc->table_ptr is NULL. The function still returns

priv->rsc_table, and the remoteproc core interprets this as a valid loaded

resource table.

Fix this by returning NULL from imx_rproc_elf_find_loaded_rsc_table() when

there is no resource table for the current firmware (i.e. when

rproc->table_ptr is NULL). This aligns the function's semantics with the

remoteproc core: a loaded resource table is only reported when a valid

table_ptr exists.

With this change, starting firmware without a resource table no longer

triggers a crash.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.1th percentile
Published
2026-05-06T11:27Z
EPSS history
Timeline
  • 06 MAY 11:27Z
    remoteproc: imx_rproc: Fix invalid loaded resource table detection
    cvelistv5