CVE-2026-43274: mailbox: mchp-ipc-sbi: fix out-of-bounds access in mchp_ipc_get_cluster_aggr_irq()
In the Linux kernel, the following vulnerability has been resolved:
mailbox: mchp-ipc-sbi: fix out-of-bounds access in mchpipcgetclusteraggrirq()
The clustercfg array is dynamically allocated to hold per-CPU configuration structures, with its size based on the number of online CPUs. Previously, this array was indexed using hartid, which may be non-contiguous or exceed the bounds of the array, leading to out-of-bounds access. Switch to using cpuid as the index, as it is guaranteed to be within the valid range provided by foreachonlinecpu().
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43274?
CVE-2026-43274 has been classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2026-43274?
To fix CVE-2026-43274, it is recommended to update to the latest version of the Linux kernel that includes the patch.
What types of systems are affected by CVE-2026-43274?
CVE-2026-43274 affects the Linux kernel, particularly systems using the mailbox: mchp-ipc-sbi functionality.
What impact does CVE-2026-43274 have on affected systems?
CVE-2026-43274 can lead to out-of-bounds access, potentially causing system instability or crashes.
When was CVE-2026-43274 discovered?
CVE-2026-43274 was identified and resolved in recent updates to the Linux kernel.