CVE-2026-46016 remoteproc: xlnx: Only access buffer information if IPI is buffered

🗓️ 27 May 2026 12:56:17Reported by GoogleType

osv

osv🔗 osv.dev👁 2 Views

Fixed NULL pointer dereference in remoteproc xlnx by validating message in receive callback.

Reporter	Title	Published	Views	Family All 83
AstraLinux	Astra Linux – Vulnerability in Linux 5.10	19 Jun 202611:10	–	astralinux
CBLMariner	CVE-2026-46016 affecting package kernel for versions less than 6.6.141.1-1	22 Jun 202621:21	–	cbl_mariner
Circl	CVE-2026-46016	2 Jul 202606:47	–	circl
CNNVD	Linux kernel 安全漏洞	27 May 202600:00	–	cnnvd
CVE	CVE-2026-46016	27 May 202612:56	–	cve
Cvelist	CVE-2026-46016 remoteproc: xlnx: Only access buffer information if IPI is buffered	27 May 202612:56	–	cvelist
Debian CVE	CVE-2026-46016	27 May 202612:56	–	debiancve
EUVD	EUVD-2026-32397	27 May 202612:56	–	euvd
Microsoft CVE	remoteproc: xlnx: Only access buffer information if IPI is buffered	28 May 202608:12	–	mscve
NVD	CVE-2026-46016	27 May 202614:17	–	nvd

Source	Link
git	www.git.kernel.org/stable/c/06d0bed2552fd0dae27d374d4492a2b672e24eed
git	www.git.kernel.org/stable/c/38dd6ccfdfbbe865569a52fe1ba9fa1478f672e6
git	www.git.kernel.org/stable/c/5d1451cb2cf6f3d9884d76035a1460aa9bb4b053
git	www.git.kernel.org/stable/c/7ddbf21116770b7011f2bb0a6056b7604b24c497
git	www.git.kernel.org/stable/c/8242579859a78c801bb626e9aa4823aca93e28e7
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46016.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-46016
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

15 Jul 2026 01:49Current

6Medium risk

Vulners AI Score6

CVSS 3.15.5

EPSS0.00122

remoteproc xlnx null pointer receive callback buffer access linux kernel buffer validation security fix