CVE-2025-68766

CVE-2025-68766

published January 5, 2026

CVSS
—
EPSS
0%
Percentile
8.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()

If irq_domain_translate_twocell() sets "hwirq" to >= MCHP_EIC_NIRQ (2) then

it results in an out of bounds access.

The code checks for invalid values, but doesn't set the error code. Return

-EINVAL in that case, instead of returning success.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00193 · 8.5th percentile
Published
2026-01-05T15:15Z
References (6)
EPSS history
Timeline
  • 05 JAN 09:44Z
    irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()
    cvelistv5