Vulnerability in Linux

CVE-2025-68766

In the Linux kernel, the following vulnerability has been resolved: irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() If irq_domain_translate_twocell() sets "hwirq" to >= MCHP_EIC_NIRQ (2) then it results in an out of bounds access. The code checks for invalid values, but doesn't set the error code. Return -EINVAL in that case, instead of returning success.

EPSS: 0.002 (5.8th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 00fa3461c86dd289b441d4d5a6bb236064bd207b, 5.16, 0

References