Security Advisory

CVE-2026-43110

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-06 07:40:37
Last updated 2026-06-01 16:14:59
Assigner Linux
CVSS score 8.8
State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: validate bsscfg indices in IF events brcmf_fweh_handle_if_event() validates the firmware-provided interface index before it touches drvr->iflist[], but it still uses the raw bsscfgidx field as an array index without a matching range check. Reject IF events whose bsscfg index does not fit in drvr->iflist[] before indexing the interface array. [add missing wifi prefix]