CVE-2026-43141: Linux kernel · ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut
Affects Linux kernelSource GCVE Database
Not known to be exploited.
Data as of 11 Nov 2026, 22:48 UTC
Rated Medium by Threat Radar's AI analysis · No CVSS score from NVD or the CNA
Thin evidence
One scorer or noneExploitation evidence
Disclosed: evidence found.
CVE published 6 May 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 11 Nov 2026.
What to do
AI-suggested
A patch has been applied to the Linux kernel to fix this issue by validating the input to rounddown_pow_of_two. Users should update to the fixed kernel version once available. Patch status is not explicitly confirmed; check the vendor advisory for current remediation guidance.
Description
A vulnerability in the Linux kernel's ntb_hw_switchtec driver was fixed to prevent a shift-out-of-bounds error when the number of memory window lookup tables (MW LUTs) is zero. The issue arises because the function rounddown_pow_of_two was called with zero, leading to undefined behavior. The patch ensures this function is only called with valid values.
References
- git.kernel.org/stable/c/d652ef399f131fcd5f8f34266167449ee7c9e5b3 (opens in a new tab)
- git.kernel.org/stable/c/5590cd04d6845c01a6bad985a491c58af6fb5389 (opens in a new tab)
- git.kernel.org/stable/c/a11d03d116eef138a7249202bd772c8e61915aec (opens in a new tab)
- git.kernel.org/stable/c/d0559d07afabfddaaded6a61a16154486b956764 (opens in a new tab)
- git.kernel.org/stable/c/2e4d5e8d86a969318340be95470bb76e52392082 (opens in a new tab)
- git.kernel.org/stable/c/a133e3caf844a3f56b6eef89ddaa66115874f6bd (opens in a new tab)
- git.kernel.org/stable/c/1a867d0d79a4a570a33f2f433919ad2bd7a27b67 (opens in a new tab)
- git.kernel.org/stable/c/186615f8855a0be4ee7d3fcd09a8ecc10e783b08 (opens in a new tab)