Linux Kernel Vulnerability in Wireless Network Interface

CVE-2026-43110

What is CVE-2026-43110?

A vulnerability has been identified in the Linux kernel related to the brcmfmac wireless driver. The issue arises from insufficient validation of the interface index provided by firmware in IF events. While the brcmf_fweh_handle_if_event() function checks the interface index prior to accessing the drvr->iflist[], it incorrectly utilizes the raw bsscfgidx field as an array index, lacking proper range checks. This oversight necessitates the rejection of IF events when the bsscfg index does not align with the bounds of drvr->iflist[]. Addressing this vulnerability is critical to maintaining the integrity and security of wireless networking in Linux environments.

References