CVE-2026-43281

mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()

published May 6, 2026

CVSS
—
EPSS
0%
Percentile
5.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()

Although it is guided that `#mbox-cells` must be at least 1, there are

many instances of `#mbox-cells = <0>;` in the device tree. If that is

the case and the corresponding mailbox controller does not provide

`fw_xlate` and of_xlate` function pointers, `fw_mbox_index_xlate()` will

be used by default and out-of-bounds accesses could occur due to lack of

bounds check in that function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00167 · 5.6th percentile
Published
2026-05-06T11:29Z
EPSS history
Timeline
  • 06 MAY 11:29Z
    mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()
    cvelistv5