CVE-2026-46016: remoteproc: xlnx: Only access buffer information if IPI is buffered
In the Linux kernel, the following vulnerability has been resolved:
remoteproc: xlnx: Only access buffer information if IPI is buffered
In the receive callback check if message is NULL to prevent possibility of crash by NULL pointer dereferencing.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.141.1-1
Event History
Frequently Asked Questions
What access does an attacker need to trigger this issue?
The vulnerability is rated AV:L and PR:L, indicating local access and low privileges are required. No user interaction is required.
What is the practical impact of successful exploitation?
Successful triggering can crash the affected kernel component through a NULL pointer dereference, resulting in denial of service. The supplied vector indicates no confidentiality or integrity impact.
Which systems should be prioritized for review?
Review systems running the Linux kernel with the remoteproc xlnx driver, as well as systems identified as using Microsoft azl3 kernel 6.6.139.1-1. The issue is specifically in the receive callback handling of buffered IPI messages.