CVE-2026-43241

ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access

State: Published
Severity: Not scored
Published: May 6, 2026
Updated: May 11, 2026
Reserved: May 1, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access

Number of MW LUTs depends on NTB configuration and can be set to MAX_MWS, This patch protects against invalid index out of bounds access to mw_sizes When invalid access print message to user that configuration is not valid.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ec0467ccbdeb69a86c8729073057bda7bce00eec to before 348e1ac9ad983ed7e62de14e1daf47f1695a4ce9Affected ec0467ccbdeb69a86c8729073057bda7bce00eec to before ee02c4f980c91820845dd8e469ec7dc670ab6d9dAffected ec0467ccbdeb69a86c8729073057bda7bce00eec to before 740945de896021b9a859e71f38f6aea72a6393cfAffected ec0467ccbdeb69a86c8729073057bda7bce00eec to before 85c9daa1f8319bbb3dfee71dc6a2f969cd3b4c92Affected ec0467ccbdeb69a86c8729073057bda7bce00eec to before 0e930420945106151c6eb3d7837b4e6154e9b144Affected ec0467ccbdeb69a86c8729073057bda7bce00eec to before 2346856b74823a2a78109002e479a3d02526a9ceAffected ec0467ccbdeb69a86c8729073057bda7bce00eec to before 47ce292dd45dc689747c40603222691638919189Affected ec0467ccbdeb69a86c8729073057bda7bce00eec to before c8ba7ad2cc1c7b90570aa347b8ebbe279f1efaceAffected
LinuxLinux	4.15Affected before 4.15Not affected 5.10.252 through 5.10.Not affected 5.15.202 through 5.15.Not affected 6.1.165 through 6.1.Not affected 6.6.128 through 6.6.Not affected 6.12.75 through 6.12.Not affected 6.18.16 through 6.18.Not affected 6.19.6 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

ec0467ccbdeb69a86c8729073057bda7bce00eec to before 348e1ac9ad983ed7e62de14e1daf47f1695a4ce9Affected
ec0467ccbdeb69a86c8729073057bda7bce00eec to before ee02c4f980c91820845dd8e469ec7dc670ab6d9dAffected
ec0467ccbdeb69a86c8729073057bda7bce00eec to before 740945de896021b9a859e71f38f6aea72a6393cfAffected
ec0467ccbdeb69a86c8729073057bda7bce00eec to before 85c9daa1f8319bbb3dfee71dc6a2f969cd3b4c92Affected
ec0467ccbdeb69a86c8729073057bda7bce00eec to before 0e930420945106151c6eb3d7837b4e6154e9b144Affected
ec0467ccbdeb69a86c8729073057bda7bce00eec to before 2346856b74823a2a78109002e479a3d02526a9ceAffected
ec0467ccbdeb69a86c8729073057bda7bce00eec to before 47ce292dd45dc689747c40603222691638919189Affected
ec0467ccbdeb69a86c8729073057bda7bce00eec to before c8ba7ad2cc1c7b90570aa347b8ebbe279f1efaceAffected

LinuxLinux

4.15Affected
before 4.15Not affected
5.10.252 through 5.10.*Not affected
5.15.202 through 5.15.*Not affected
6.1.165 through 6.1.*Not affected
6.6.128 through 6.6.*Not affected
6.12.75 through 6.12.*Not affected
6.18.16 through 6.18.*Not affected
6.19.6 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.