CVE-2026-43113: wifi: wl1251: validate packet IDs before indexing tx_frames
In the Linux kernel, the following vulnerability has been resolved:
wifi: wl1251: validate packet IDs before indexing txframes
wl1251txpacketcb() uses the firmware completion ID directly to index the fixed 16-entry wl->txframes[] array. The ID is a raw u8 from the completion block, and the callback does not currently verify that it fits the array before dereferencing it.
Reject completion IDs that fall outside wl->txframes[] and keep the existing NULL check in the same guard. This keeps the fix local to the trust boundary and avoids touching the rest of the completion flow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43113?
CVE-2026-43113 is classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2026-43113?
To mitigate CVE-2026-43113, update to the latest version of the Linux kernel that contains the patch for this vulnerability.
What systems are affected by CVE-2026-43113?
CVE-2026-43113 affects multiple versions of the Linux kernel, particularly those using the wl1251 driver.
What is the impact of CVE-2026-43113?
CVE-2026-43113 can potentially allow for unauthorized access to memory, leading to information disclosure.
Is CVE-2026-43113 being actively exploited?
As of now, there is no public information indicating that CVE-2026-43113 is being actively exploited in the wild.