Skip to content
Heist/ feed
Back to feed
UnratedFix available

remoteproc: xlnx: Only access buffer information if IPI is buffered

Type: advisorySources: OSV

In the Linux kernel, the following vulnerability has been resolved: remoteproc: xlnx: Only access buffer information if IPI is buffered In the receive callback check if message is NULL to prevent possibility of crash by NULL pointer dereferencing.

Products
Kernel
Affected versions
Not specified
Fixed versions
6.12.86, 6.18.27, 6.6.140, 7.0.4
CVEs
CVE-2026-46016
Confirmed fixed CVEs
Not specified
Updated in this feed
2 Nov 2026, 20:32 UTC · Revision 1

Source evidence

remoteproc: xlnx: Only access buffer information if IPI is buffered

core-osv · Original source

Published 27 May 2026, 12:56 UTC

In the Linux kernel, the following vulnerability has been resolved: remoteproc: xlnx: Only access buffer information if IPI is buffered In the receive callback check if message is NULL to prevent possibility of crash by NULL pointer dereferencing.

osv:CVE-2026-46016

Kernel

Fixed versions: 6.6.140, 6.12.86, 6.18.27, 7.0.4

Complete source record
{
  "id": "7b93b97205a8a25c751f7cd32f2f834a5116e68fd65856543aacbd15899a9086",
  "url": "https://osv.dev/vulnerability/CVE-2026-46016",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "remoteproc: xlnx: Only access buffer information if IPI is buffered",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: remoteproc: xlnx: Only access buffer information if IPI is buffered In the receive callback check if message is NULL to prevent possibility of crash by NULL pointer dereferencing.",
    "evidence": "osv:CVE-2026-46016",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "6.6.140",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.12.86",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.18.27",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "7.0.4",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CVE-2026-46016",
      "aliases": [
        "CVE-2026-46016"
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "5dfb28c257b7c515624ba6b163410ceada451bf2"
                },
                {
                  "fixed": "5d1451cb2cf6f3d9884d76035a1460aa9bb4b053"
                },
                {
                  "fixed": "7ddbf21116770b7011f2bb0a6056b7604b24c497"
                },
                {
                  "fixed": "06d0bed2552fd0dae27d374d4492a2b672e24eed"
                },
                {
                  "fixed": "8242579859a78c801bb626e9aa4823aca93e28e7"
                },
                {
                  "fixed": "38dd6ccfdfbbe865569a52fe1ba9fa1478f672e6"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46016.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.4.0"
                },
                {
                  "fixed": "6.6.140"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.7.0"
                },
                {
                  "fixed": "6.12.86"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.13.0"
                },
                {
                  "fixed": "6.18.27"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.19.0"
                },
                {
                  "fixed": "7.0.4"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46016.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:23.695606769Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/06d0bed2552fd0dae27d374d4492a2b672e24eed",
        "https://git.kernel.org/stable/c/38dd6ccfdfbbe865569a52fe1ba9fa1478f672e6",
        "https://git.kernel.org/stable/c/5d1451cb2cf6f3d9884d76035a1460aa9bb4b053",
        "https://git.kernel.org/stable/c/7ddbf21116770b7011f2bb0a6056b7604b24c497",
        "https://git.kernel.org/stable/c/8242579859a78c801bb626e9aa4823aca93e28e7",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46016.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-46016",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46016.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2026-46016",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 489904,
  "published_at": "2026-05-27T12:56:17.97+00:00"
}