CVE-2025-68766 irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()
A missing error check in the Linux kernel Microchip EIC driver allows out-of-bounds access, potentially causing a system crash.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Not stated
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-68766?
CVE-2025-68766 is a vulnerability in Linux, published on 5 Jan 2026.
Official description
In the Linux kernel, the following vulnerability has been resolved:
irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()
If irq_domain_translate_twocell() sets "hwirq" to >= MCHP_EIC_NIRQ (2) then it results in an out of bounds access.
The code checks for invalid values, but doesn't set the error code. Return -EINVAL in that case, instead of returning success.
Which versions are affected by CVE-2025-68766?
How do I fix CVE-2025-68766?
Apply the vendor's patch.
Is CVE-2025-68766 being exploited?
There is no known exploitation of CVE-2025-68766 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2025-68766, DEBIAN-CVE-2025-68766, GHSA-8866-wmp5-q7xv, ROOT-OS-DEBIAN-12-CVE-2025-68766, ROOT-OS-DEBIAN-13-CVE-2025-68766, ROOT-OS-UBUNTU-2404-CVE-2025-68766 and 1 more.