CVE-2026-43145

remoteproc: imx_rproc: Fix invalid loaded resource table detection

MEDIUM
5.5
CVSS Score
Published: May 6, 2026 at 11:27 AM UTC
Updated: June 17, 2026 at 10:49 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: remoteproc: imx_rproc: Fix invalid loaded resource table detection imx_rproc_elf_find_loaded_rsc_table() may incorrectly report a loaded resource table even when the current firmware does not provide one. When the device tree contains a "rsc-table" entry, priv->rsc_table is non-NULL and denotes where a resource table would be located if one is present in memory. However, when the current firmware has no resource table, rproc->table_ptr is NULL. The function still returns priv->rsc_table, and the remoteproc core interprets this as a valid loaded resource table. Fix this by returning NULL from imx_rproc_elf_find_loaded_rsc_table() when there is no resource table for the current firmware (i.e. when rproc->table_ptr is NULL). This aligns the function's semantics with the remoteproc core: a loaded resource table is only reported when a valid table_ptr exists. With this change, starting firmware without a resource table no longer triggers a crash.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v ≥ 6.11.45.15.168 ≤ v < 5.15.2026.1.113 ≤ v < 6.1.1656.11.4 ≤ v < 6.126.11.4 ≤ v < 6.12.756.12 ≤ v < 6.12.756.12 ≤ v < 6.18.166.12 ≤ v < 6.19.66.12 ≤ v < 7.06.13 ≤ v < 6.18.166.19 ≤ v < 6.19.66.6.57 ≤ v < 6.6.1281d750606fedcdff7886f35a558c51b05ce2680a63d131f138e092c414c69860f2c897c59d660da995.15.1686.1.1136.11.46.126.6.5764f2ca5ce97111a364a18c31772eb46c79e8b7727fb5f957213bc7268bac449f8bfe95967c9f3f3be954a1bd16102abc800629f9900715d8ec4c3130
Vendor states this is fixed in 198c629bd03863591f3fbf5ce8ff974a33f13dc9 (fixed)
Vendor states this is fixed in 26aa5295010ffaebcf8f1991c53fa7cf2ee1b20d (fixed)
Vendor states this is fixed in 500778df9e4c313190368908ff40c23948508e97 (fixed)
Vendor states this is fixed in 65379adf7d231c930572db45933ff4538f4c5128 (fixed)
Vendor states this is fixed in 91baf24d972ea3c04a75dd18821c03d223c0dbc0 (fixed)
Vendor states this is fixed in 9bd98d088f47153a81a6ec8162b4415c64aa7f39 (fixed)
Vendor states this is fixed in fcec79b6a3649ae7b1f659267602ca402c240d6e (fixed)
Vendor states this is fixed in 5.15.202 (unaffected)
Vendor states this is fixed in 6.1.165 (unaffected)
Vendor states this is fixed in 6.12 (unaffected)
Vendor states this is fixed in 6.12.75 (unaffected)
Vendor states this is fixed in 6.18.16 (unaffected)
Vendor states this is fixed in 6.19.6 (unaffected)
Vendor states this is fixed in 6.6.128 (unaffected)
Vendor states this is fixed in 7.0 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-401

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card