CVE-2026-43141

ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut

State: Published
Severity: Not scored
Published: May 6, 2026
Updated: May 11, 2026
Reserved: May 1, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut

Number of MW LUTs depends on NTB configuration and can be set to zero, in such scenario rounddown_pow_of_two will cause undefined behaviour and should not be performed. This patch ensures that rounddown_pow_of_two is called on valid value.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ec0467ccbdeb69a86c8729073057bda7bce00eec to before d652ef399f131fcd5f8f34266167449ee7c9e5b3Affected ec0467ccbdeb69a86c8729073057bda7bce00eec to before 5590cd04d6845c01a6bad985a491c58af6fb5389Affected ec0467ccbdeb69a86c8729073057bda7bce00eec to before a11d03d116eef138a7249202bd772c8e61915aecAffected ec0467ccbdeb69a86c8729073057bda7bce00eec to before d0559d07afabfddaaded6a61a16154486b956764Affected ec0467ccbdeb69a86c8729073057bda7bce00eec to before 2e4d5e8d86a969318340be95470bb76e52392082Affected ec0467ccbdeb69a86c8729073057bda7bce00eec to before a133e3caf844a3f56b6eef89ddaa66115874f6bdAffected ec0467ccbdeb69a86c8729073057bda7bce00eec to before 1a867d0d79a4a570a33f2f433919ad2bd7a27b67Affected ec0467ccbdeb69a86c8729073057bda7bce00eec to before 186615f8855a0be4ee7d3fcd09a8ecc10e783b08Affected
LinuxLinux	4.15Affected before 4.15Not affected 5.10.252 through 5.10.Not affected 5.15.202 through 5.15.Not affected 6.1.165 through 6.1.Not affected 6.6.128 through 6.6.Not affected 6.12.75 through 6.12.Not affected 6.18.16 through 6.18.Not affected 6.19.6 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

ec0467ccbdeb69a86c8729073057bda7bce00eec to before d652ef399f131fcd5f8f34266167449ee7c9e5b3Affected
ec0467ccbdeb69a86c8729073057bda7bce00eec to before 5590cd04d6845c01a6bad985a491c58af6fb5389Affected
ec0467ccbdeb69a86c8729073057bda7bce00eec to before a11d03d116eef138a7249202bd772c8e61915aecAffected
ec0467ccbdeb69a86c8729073057bda7bce00eec to before d0559d07afabfddaaded6a61a16154486b956764Affected
ec0467ccbdeb69a86c8729073057bda7bce00eec to before 2e4d5e8d86a969318340be95470bb76e52392082Affected
ec0467ccbdeb69a86c8729073057bda7bce00eec to before a133e3caf844a3f56b6eef89ddaa66115874f6bdAffected
ec0467ccbdeb69a86c8729073057bda7bce00eec to before 1a867d0d79a4a570a33f2f433919ad2bd7a27b67Affected
ec0467ccbdeb69a86c8729073057bda7bce00eec to before 186615f8855a0be4ee7d3fcd09a8ecc10e783b08Affected

LinuxLinux

4.15Affected
before 4.15Not affected
5.10.252 through 5.10.*Not affected
5.15.202 through 5.15.*Not affected
6.1.165 through 6.1.*Not affected
6.6.128 through 6.6.*Not affected
6.12.75 through 6.12.*Not affected
6.18.16 through 6.18.*Not affected
6.19.6 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.