Out of Bounds Access in Linux Kernel Due to Error Code Issue in irqchip/mchp-eic

CVE-2025-68766

What is CVE-2025-68766?

A flaw in the Linux kernel's irqchip/mchp-eic component allows for an out of bounds access when the function irq_domain_translate_twocell() unexpectedly evaluates 'hwirq' to a value greater than or equal to MCHP_EIC_NIRQ. The checking mechanism for invalid values is present; however, it fails to set an appropriate error code, leading to potential instability in systems relying on these components. Developers are advised to be cautious when working with this part of the kernel to avoid unintended behavior.

References