CVE-2025-68766
BaseFortify
Publication date: 2026-01-05
Last updated on: 2026-01-11
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux_kernel | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is in the Linux kernel's irqchip/mchp-eic component. Specifically, the function irq_domain_translate_twocell() can set a hardware interrupt request number (hwirq) to a value greater than or equal to MCHP_EIC_NIRQ (which is 2). This causes an out-of-bounds access because the code checks for invalid values but does not set the appropriate error code. The fix involves returning an error code (-EINVAL) instead of success when such invalid values occur.
How can this vulnerability impact me? :
The vulnerability can lead to out-of-bounds memory access in the Linux kernel, which may cause system instability, crashes, or potentially allow an attacker to exploit the kernel for further malicious actions. However, specific impacts are not detailed in the provided information.