CVE-2026-43110

EUVD-2026-27630

06.05.2026, 10:16

In the Linux kernel, the following vulnerability has been resolved:

wifi: brcmfmac: validate bsscfg indices in IF events

brcmf_fweh_handle_if_event() validates the firmware-provided interface
index before it touches drvr->iflist[], but it still uses the raw
bsscfgidx field as an array index without a matching range check.

Reject IF events whose bsscfg index does not fit in drvr->iflist[]
before indexing the interface array.

[add missing wifi prefix]

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	8.8 HIGH	ADJACENT_NETWORK	LOW	NONE	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 15%

Affected Products (NVD)

Vendor	Product	Version
linux	linux_kernel	3.9 ≤ 𝑥 < 6.6.136
linux	linux_kernel	6.7 ≤ 𝑥 < 6.12.83
linux	linux_kernel	6.13 ≤ 𝑥 < 6.18.24
linux	linux_kernel	6.19 ≤ 𝑥 < 6.19.14
linux	linux_kernel	7.0:rc1
linux	linux_kernel	7.0:rc2
linux	linux_kernel	7.0:rc3
linux	linux_kernel	7.0:rc4
linux	linux_kernel	7.0:rc5
linux	linux_kernel	7.0:rc6
linux	linux_kernel	7.0:rc7

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

linux

bookworm	vulnerable
bookworm (security)	vulnerable
bullseye	vulnerable
bullseye (security)	vulnerable
forky	7.0.12-2 fixed
sid	7.0.13-1 fixed
trixie	6.12.86-1 fixed
trixie (security)	6.12.94-1 fixed

openSUSE / SLES Releases

openSUSE Product

Release

cluster-md-kmp-default

suse enterprise server 12 SP5	4.12.14-122.310.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.166.1 fixed
suse enterprise server 15 SP6	6.4.0-150600.23.112.1 fixed

dlm-kmp-default

suse enterprise server 12 SP5	4.12.14-122.310.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.166.1 fixed
suse enterprise server 15 SP6	6.4.0-150600.23.112.1 fixed

gfs2-kmp-default

suse enterprise server 12 SP5	4.12.14-122.310.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.166.1 fixed
suse enterprise server 15 SP6	6.4.0-150600.23.112.1 fixed

kernel-64kb

suse enterprise desktop 15 SP7	6.4.0-150700.53.55.1 fixed
suse enterprise sap 15 SP7	6.4.0-150700.53.55.1 fixed
suse enterprise server 15 SP4	5.14.21-150400.24.219.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.166.1 fixed
suse enterprise server 15 SP6	6.4.0-150600.23.112.1 fixed
suse enterprise server 15 SP7	6.4.0-150700.53.55.1 fixed

kernel-default

suse enterprise desktop 15 SP7	6.4.0-150700.53.55.1 fixed
suse enterprise sap 15 SP7	6.4.0-150700.53.55.1 fixed
suse enterprise server 12 SP5	4.12.14-122.310.1 fixed
suse enterprise server 15 SP4	5.14.21-150400.24.219.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.166.1 fixed
suse enterprise server 15 SP6	6.4.0-150600.23.112.1 fixed
suse enterprise server 15 SP7	6.4.0-150700.53.55.1 fixed

kernel-default-base

suse enterprise desktop 15 SP7	6.4.0-150700.53.55.1.150700.17.33.1 fixed
suse enterprise sap 15 SP7	6.4.0-150700.53.55.1.150700.17.33.1 fixed
suse enterprise server 12 SP5	4.12.14-122.310.1 fixed
suse enterprise server 15 SP4	5.14.21-150400.24.219.1.150400.24.110.2 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.166.1.150500.6.77.1 fixed
suse enterprise server 15 SP6	6.4.0-150600.23.112.1.150600.12.52.1 fixed
suse enterprise server 15 SP7	6.4.0-150700.53.55.1.150700.17.33.1 fixed

kernel-default-man

suse enterprise server 12 SP5

4.12.14-122.310.1

fixed

kernel-obs-build

suse enterprise desktop 15 SP7	6.4.0-150700.53.55.1 fixed
suse enterprise sap 15 SP7	6.4.0-150700.53.55.1 fixed
suse enterprise server 15 SP4	5.14.21-150400.24.219.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.166.1 fixed
suse enterprise server 15 SP6	6.4.0-150600.23.112.1 fixed
suse enterprise server 15 SP7	6.4.0-150700.53.55.1 fixed

kernel-source

suse enterprise desktop 15 SP7	6.4.0-150700.53.55.1 fixed
suse enterprise sap 15 SP7	6.4.0-150700.53.55.1 fixed
suse enterprise server 12 SP5	4.12.14-122.310.1 fixed
suse enterprise server 15 SP4	5.14.21-150400.24.219.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.166.1 fixed
suse enterprise server 15 SP6	6.4.0-150600.23.112.1 fixed
suse enterprise server 15 SP7	6.4.0-150700.53.55.1 fixed

kernel-zfcpdump

suse enterprise desktop 15 SP7	6.4.0-150700.53.55.1 fixed
suse enterprise sap 15 SP7	6.4.0-150700.53.55.1 fixed
suse enterprise server 15 SP4	5.14.21-150400.24.219.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.166.1 fixed
suse enterprise server 15 SP6	6.4.0-150600.23.112.1 fixed
suse enterprise server 15 SP7	6.4.0-150700.53.55.1 fixed

ocfs2-kmp-default

suse enterprise server 12 SP5	4.12.14-122.310.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.166.1 fixed
suse enterprise server 15 SP6	6.4.0-150600.23.112.1 fixed

reiserfs-kmp-default

suse enterprise server 15 SP4	5.14.21-150400.24.219.1 fixed
suse enterprise server 15 SP5	5.14.21-150500.55.166.1 fixed
suse enterprise server 15 SP6	6.4.0-150600.23.112.1 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

bpftool

RHEL 8	0:4.18.0-553.134.1.el8_10 fixed
RHEL 8.4 AUS	0:4.18.0-305.194.1.el8_4 fixed
RHEL 8.6 AUS	0:4.18.0-372.195.1.el8_6 fixed
RHEL 8.8 E4S	0:4.18.0-477.147.1.el8_8 fixed
RHEL 8.8 TUS	0:4.18.0-477.147.1.el8_8 fixed

kernel

RHEL 8	0:4.18.0-553.134.1.el8_10 fixed
RHEL 8.4 AUS	0:4.18.0-305.194.1.el8_4 fixed
RHEL 8.6 AUS	0:4.18.0-372.195.1.el8_6 fixed
RHEL 8.8 E4S	0:4.18.0-477.147.1.el8_8 fixed
RHEL 8.8 TUS	0:4.18.0-477.147.1.el8_8 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

kernel-64k

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-64k-core

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-64k-debug

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-64k-debug-core

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-64k-debug-devel

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-64k-debug-devel-matched

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-64k-debug-modules

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-64k-debug-modules-core

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-64k-debug-modules-extra

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-64k-devel

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-64k-devel-matched

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-64k-modules

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-64k-modules-core

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-64k-modules-extra

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-abi-stablelists

RHEL 8	0:4.18.0-553.134.1.el8_10 fixed
RHEL 8.4 AUS	0:4.18.0-305.194.1.el8_4 fixed
RHEL 8.6 AUS	0:4.18.0-372.195.1.el8_6 fixed
RHEL 8.8 E4S	0:4.18.0-477.147.1.el8_8 fixed
RHEL 8.8 TUS	0:4.18.0-477.147.1.el8_8 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

kernel-core

RHEL 8	0:4.18.0-553.134.1.el8_10 fixed
RHEL 8.4 AUS	0:4.18.0-305.194.1.el8_4 fixed
RHEL 8.6 AUS	0:4.18.0-372.195.1.el8_6 fixed
RHEL 8.8 E4S	0:4.18.0-477.147.1.el8_8 fixed
RHEL 8.8 TUS	0:4.18.0-477.147.1.el8_8 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

kernel-debug

RHEL 8	0:4.18.0-553.134.1.el8_10 fixed
RHEL 8.4 AUS	0:4.18.0-305.194.1.el8_4 fixed
RHEL 8.6 AUS	0:4.18.0-372.195.1.el8_6 fixed
RHEL 8.8 E4S	0:4.18.0-477.147.1.el8_8 fixed
RHEL 8.8 TUS	0:4.18.0-477.147.1.el8_8 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

kernel-debug-core

RHEL 8	0:4.18.0-553.134.1.el8_10 fixed
RHEL 8.4 AUS	0:4.18.0-305.194.1.el8_4 fixed
RHEL 8.6 AUS	0:4.18.0-372.195.1.el8_6 fixed
RHEL 8.8 E4S	0:4.18.0-477.147.1.el8_8 fixed
RHEL 8.8 TUS	0:4.18.0-477.147.1.el8_8 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

kernel-debug-devel

RHEL 8	0:4.18.0-553.134.1.el8_10 fixed
RHEL 8.4 AUS	0:4.18.0-305.194.1.el8_4 fixed
RHEL 8.6 AUS	0:4.18.0-372.195.1.el8_6 fixed
RHEL 8.8 E4S	0:4.18.0-477.147.1.el8_8 fixed
RHEL 8.8 TUS	0:4.18.0-477.147.1.el8_8 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

kernel-debug-devel-matched

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-debug-modules

RHEL 8	0:4.18.0-553.134.1.el8_10 fixed
RHEL 8.4 AUS	0:4.18.0-305.194.1.el8_4 fixed
RHEL 8.6 AUS	0:4.18.0-372.195.1.el8_6 fixed
RHEL 8.8 E4S	0:4.18.0-477.147.1.el8_8 fixed
RHEL 8.8 TUS	0:4.18.0-477.147.1.el8_8 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

kernel-debug-modules-core

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-debug-modules-extra

RHEL 8	0:4.18.0-553.134.1.el8_10 fixed
RHEL 8.4 AUS	0:4.18.0-305.194.1.el8_4 fixed
RHEL 8.6 AUS	0:4.18.0-372.195.1.el8_6 fixed
RHEL 8.8 E4S	0:4.18.0-477.147.1.el8_8 fixed
RHEL 8.8 TUS	0:4.18.0-477.147.1.el8_8 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

kernel-debug-uki-virt

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-devel

RHEL 8	0:4.18.0-553.134.1.el8_10 fixed
RHEL 8.4 AUS	0:4.18.0-305.194.1.el8_4 fixed
RHEL 8.6 AUS	0:4.18.0-372.195.1.el8_6 fixed
RHEL 8.8 E4S	0:4.18.0-477.147.1.el8_8 fixed
RHEL 8.8 TUS	0:4.18.0-477.147.1.el8_8 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

kernel-devel-matched

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-doc

RHEL 8	0:4.18.0-553.134.1.el8_10 fixed
RHEL 8.4 AUS	0:4.18.0-305.194.1.el8_4 fixed
RHEL 8.6 AUS	0:4.18.0-372.195.1.el8_6 fixed
RHEL 8.8 E4S	0:4.18.0-477.147.1.el8_8 fixed
RHEL 8.8 TUS	0:4.18.0-477.147.1.el8_8 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

kernel-modules

RHEL 8	0:4.18.0-553.134.1.el8_10 fixed
RHEL 8.4 AUS	0:4.18.0-305.194.1.el8_4 fixed
RHEL 8.6 AUS	0:4.18.0-372.195.1.el8_6 fixed
RHEL 8.8 E4S	0:4.18.0-477.147.1.el8_8 fixed
RHEL 8.8 TUS	0:4.18.0-477.147.1.el8_8 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

kernel-modules-core

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-modules-extra

RHEL 8	0:4.18.0-553.134.1.el8_10 fixed
RHEL 8.4 AUS	0:4.18.0-305.194.1.el8_4 fixed
RHEL 8.6 AUS	0:4.18.0-372.195.1.el8_6 fixed
RHEL 8.8 E4S	0:4.18.0-477.147.1.el8_8 fixed
RHEL 8.8 TUS	0:4.18.0-477.147.1.el8_8 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

kernel-rt

RHEL 8	0:4.18.0-553.134.1.rt7.475.el8_10 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

kernel-rt-64k

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-rt-64k-core

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-rt-64k-debug

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-rt-64k-debug-core

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-rt-64k-debug-devel

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-rt-64k-debug-modules

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-rt-64k-debug-modules-core

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-rt-64k-debug-modules-extra

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-rt-64k-devel

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-rt-64k-modules

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-rt-64k-modules-core

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-rt-64k-modules-extra

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-rt-core

RHEL 8	0:4.18.0-553.134.1.rt7.475.el8_10 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

kernel-rt-debug

RHEL 8	0:4.18.0-553.134.1.rt7.475.el8_10 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

kernel-rt-debug-core

RHEL 8	0:4.18.0-553.134.1.rt7.475.el8_10 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

kernel-rt-debug-devel

RHEL 8	0:4.18.0-553.134.1.rt7.475.el8_10 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

kernel-rt-debug-kvm

RHEL 8

0:4.18.0-553.134.1.rt7.475.el8_10

fixed

kernel-rt-debug-modules

RHEL 8	0:4.18.0-553.134.1.rt7.475.el8_10 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

kernel-rt-debug-modules-core

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-rt-debug-modules-extra

RHEL 8	0:4.18.0-553.134.1.rt7.475.el8_10 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

kernel-rt-devel

RHEL 8	0:4.18.0-553.134.1.rt7.475.el8_10 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

kernel-rt-kvm

RHEL 8

0:4.18.0-553.134.1.rt7.475.el8_10

fixed

kernel-rt-modules

RHEL 8	0:4.18.0-553.134.1.rt7.475.el8_10 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

kernel-rt-modules-core

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-rt-modules-extra

RHEL 8	0:4.18.0-553.134.1.rt7.475.el8_10 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

kernel-tools

RHEL 8	0:4.18.0-553.134.1.el8_10 fixed
RHEL 8.4 AUS	0:4.18.0-305.194.1.el8_4 fixed
RHEL 8.6 AUS	0:4.18.0-372.195.1.el8_6 fixed
RHEL 8.8 E4S	0:4.18.0-477.147.1.el8_8 fixed
RHEL 8.8 TUS	0:4.18.0-477.147.1.el8_8 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

kernel-tools-libs

RHEL 8	0:4.18.0-553.134.1.el8_10 fixed
RHEL 8.4 AUS	0:4.18.0-305.194.1.el8_4 fixed
RHEL 8.6 AUS	0:4.18.0-372.195.1.el8_6 fixed
RHEL 8.8 E4S	0:4.18.0-477.147.1.el8_8 fixed
RHEL 8.8 TUS	0:4.18.0-477.147.1.el8_8 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

kernel-tools-libs-devel

RHEL 8	0:4.18.0-553.134.1.el8_10 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

kernel-uki-virt

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-uki-virt-addons

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-zfcpdump

RHEL 8	0:4.18.0-553.134.1.el8_10 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

kernel-zfcpdump-core

RHEL 8	0:4.18.0-553.134.1.el8_10 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

kernel-zfcpdump-devel

RHEL 8	0:4.18.0-553.134.1.el8_10 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

kernel-zfcpdump-devel-matched

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-zfcpdump-modules

RHEL 8	0:4.18.0-553.134.1.el8_10 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

kernel-zfcpdump-modules-core

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

kernel-zfcpdump-modules-extra

RHEL 8	0:4.18.0-553.134.1.el8_10 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

libperf

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

perf

RHEL 8	0:4.18.0-553.134.1.el8_10 fixed
RHEL 8.4 AUS	0:4.18.0-305.194.1.el8_4 fixed
RHEL 8.6 AUS	0:4.18.0-372.195.1.el8_6 fixed
RHEL 8.8 E4S	0:4.18.0-477.147.1.el8_8 fixed
RHEL 8.8 TUS	0:4.18.0-477.147.1.el8_8 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

python3-perf

RHEL 8	0:4.18.0-553.134.1.el8_10 fixed
RHEL 8.4 AUS	0:4.18.0-305.194.1.el8_4 fixed
RHEL 8.6 AUS	0:4.18.0-372.195.1.el8_6 fixed
RHEL 8.8 E4S	0:4.18.0-477.147.1.el8_8 fixed
RHEL 8.8 TUS	0:4.18.0-477.147.1.el8_8 fixed
RHEL 9	0:5.14.0-687.12.1.el9_8 fixed

rtla

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

RHEL 9

0:5.14.0-687.12.1.el9_8

fixed

Vulnerability Media Exposure

[GERMAN] Linux Kernel: Mehrere Schwachstellen
Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service zu verursachen, Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen oder potentiell beliebigen Programmcode auszuführen.
Published: 2026-05-05T22:00:00+00:00

References

https://git.kernel.org/stable/c/1ae1e1caa428844e481231f6dbe9b4f475f1d52d

https://git.kernel.org/stable/c/2ae3ccb78c0a9ef5ee3d80d02ab319ac1d5af734

https://git.kernel.org/stable/c/304950a467d83678bd0b0f46331882e2ac23b12d

https://git.kernel.org/stable/c/3ec7437e9d11374105c2c4e47ae671537729d7e6

https://git.kernel.org/stable/c/9c81bcc2c695e0082012a2a3d36a0eefaa51579c

https://git.kernel.org/stable/c/9fca68c2512a362cad258e4df12a307bb2ee4b8e

https://git.kernel.org/stable/c/b329fbcf075949a038045d8e9b86ae3d5bbd8a54

https://git.kernel.org/stable/c/b427c2b05222db36d32ee141609de6128e9091bb