Answer in brief
CVE-2026-43281 records a Unknown severity vulnerability in mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | 3.18 | Not reported |
| Linux/Linuxgeneric | >=2b6d83e2b8b7de82331a6a1dcd64b51020a6031c <2c7ff651ec6b660c7c96a36db9328b3232f555d8 || >=2b6d83e2b8b7de82331a6a1dcd64b51020a6031c <ec0874447895b994182a962d2fee9ef075de5efd || >=2b6d83e2b8b7de82331a6a1dcd64b51020a6031c <2662ed331a69c0b551f78af58f12eb629a89a36f || >=2b6d83e2b8b7de82331a6a1dcd64b51020a6031c <31c4c67dec3362094a6747a171a4848e98542265 || >=2b6d83e2b8b7de82331a6a1dcd64b51020a6031c <01d9a8c2615d436b2b30c19c1afe9fcd5726ff6d || >=2b6d83e2b8b7de82331a6a1dcd64b51020a6031c <4caae8168d1b808c7d4ff481295292e3f97f90fb || >=2b6d83e2b8b7de82331a6a1dcd64b51020a6031c <f50b39fd7c72a8734153644ee945ca0d8b2e65ab || >=2b6d83e2b8b7de82331a6a1dcd64b51020a6031c <fcd7f96c783626c07ee3ed75fa3739a8a2052310 | 2c7ff651ec6b660c7c96a36db9328b3232f555d8, ec0874447895b994182a962d2fee9ef075de5efd, 2662ed331a69c0b551f78af58f12eb629a89a36f, 31c4c67dec3362094a6747a171a4848e98542265, 01d9a8c2615d436b2b30c19c1afe9fcd5726ff6d, 4caae8168d1b808c7d4ff481295292e3f97f90fb, f50b39fd7c72a8734153644ee945ca0d8b2e65ab, fcd7f96c783626c07ee3ed75fa3739a8a2052310 |
Published upstream
May 6, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Nov 6, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Nov 6, 2026
In the Linux kernel, the following vulnerability has been resolved: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() Although it is guided that `#mbox-cells` must be at least 1, there are many instances of `#mbox-cells = <0>;` in the device tree. If that is the case and the corresponding mailbox controller does not provide `fw_xlate` and of_xlate` function pointers, `fw_mbox_index_xlate()` will be used by default and out-of-bounds accesses could occur due to lack of bounds check in that function.
Quoted source text, attributed separately from HOL analysis.