CVE-2026-43110: wifi: brcmfmac: validate bsscfg indices in IF events
In the Linux kernel, the following vulnerability has been resolved:
wifi: brcmfmac: validate bsscfg indices in IF events
brcmffwehhandleifevent() validates the firmware-provided interface index before it touches drvr->iflist[], but it still uses the raw bsscfgidx field as an array index without a matching range check.
Reject IF events whose bsscfg index does not fit in drvr->iflist[] before indexing the interface array.
[add missing wifi prefix]
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43110?
The severity of CVE-2026-43110 is classified as medium, as it could lead to potential exposure due to improper handling of interface indices.
How do I fix CVE-2026-43110?
To fix CVE-2026-43110, update the Linux kernel brcmfmac driver to a version that includes the patch addressing this vulnerability.
What systems are affected by CVE-2026-43110?
CVE-2026-43110 affects various versions of the Linux kernel brcmfmac driver, particularly those from version 3.9 up to 7.0-rc7.
What components are involved in CVE-2026-43110?
CVE-2026-43110 involves the interaction between the Linux kernel and the brcmfmac wireless driver, specifically in handling interface events.
Can CVE-2026-43110 lead to exploitation attempts?
While CVE-2026-43110 holds a medium risk, it can potentially allow an attacker to exploit the vulnerability under specific circumstances.