CVE detail
CVE-2026-46163
In the Linux kernel, the following vulnerability has been resolved: wifi: b43legacy: enforce bounds check on firmware key index in RX path Same fix as b43: the firmware-controlled key index in b43legacy_rx() can exceed dev->max_nr_keys. The existing B43legacy_WARN_ON is non-enforcing in production builds, allowing an out-of-bounds read of dev->key[]. Make the check enforcing by dropping the frame for invalid indices.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 23.0 · diversity 10.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
9 source links · newest first
Information published.
vendormsrc.microsoft.comMay 29, 2026, 8:02 AMNo excerpt available.
Exploitgit.kernel.orgMay 28, 2026, 10:16 AMNo excerpt available.
Exploitgit.kernel.orgMay 28, 2026, 10:16 AMNo excerpt available.
Exploitgit.kernel.orgMay 28, 2026, 10:16 AMNo excerpt available.
Exploitgit.kernel.orgMay 28, 2026, 10:16 AMNo excerpt available.
Exploitgit.kernel.orgMay 28, 2026, 10:16 AMNo excerpt available.
Exploitgit.kernel.orgMay 28, 2026, 10:16 AMNo excerpt available.
Exploitgit.kernel.orgMay 28, 2026, 10:16 AMNo excerpt available.
Exploitgit.kernel.orgMay 28, 2026, 10:16 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-64273CVSS 7.8 · High
In the Linux kernel, the following vulnerability has been resolved: Input: iforce - bound the device-reported force-feedback effect index iforce_process_packet() handles a statu…
- CVE-2026-64272CVSS 7.8 · High
In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - fix touch indexing for MMS134S and MMS136 The MMS134S and MMS136 touch controllers have an ev…
- CVE-2026-64271CVSS 7.8 · High
In the Linux kernel, the following vulnerability has been resolved: Input: touchwin - reset the packet index on every complete packet tw_interrupt() accumulates each non-zero se…
- CVE-2026-64225CVSS 7.8 · High
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: add bounds check to cgx_speed_mbps index cgx_speed_mbps has 13 elements but RESP_LINKSTAT_…
- CVE-2026-53387CVSS 7.1 · High
In the Linux kernel, the following vulnerability has been resolved: iio: light: veml6075: add bounds check to veml6075_it_ms index veml6075_it_ms has 5 elements but VEML6075_CON…
- CVE-2026-53386CVSS 7.8 · High
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1298: add bounds check to pga_settings index ads1298_pga_settings has 7 elements but ADS1298_…