CVE-2025-68766
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2026-01-05

Last updated on: 2026-01-11

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() If irq_domain_translate_twocell() sets "hwirq" to >= MCHP_EIC_NIRQ (2) then it results in an out of bounds access. The code checks for invalid values, but doesn't set the error code. Return -EINVAL in that case, instead of returning success.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-01-05
Last Modified
2026-01-11
Generated
2026-06-16
AI Q&A
2026-01-05
EPSS Evaluated
2026-06-14
NVD
CVE-2025-68766
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
linux_kernel linux_kernel *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is in the Linux kernel's irqchip/mchp-eic component. Specifically, the function irq_domain_translate_twocell() can set a hardware interrupt request number (hwirq) to a value greater than or equal to MCHP_EIC_NIRQ (which is 2). This causes an out-of-bounds access because the code checks for invalid values but does not set the appropriate error code. The fix involves returning an error code (-EINVAL) instead of success when such invalid values occur.

Impact Analysis

The vulnerability can lead to out-of-bounds memory access in the Linux kernel, which may cause system instability, crashes, or potentially allow an attacker to exploit the kernel for further malicious actions. However, specific impacts are not detailed in the provided information.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-68766. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart