CVE-2026-80822: mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf()
In the Linux kernel, the following vulnerability has been resolved:
mailbox: mchp-ipc-sbi: Add null check for devmkasprintf()
Add a check to see if devmkasprintf() is not NULL in mchpipcgetclusteraggrirq(), returning -ENOMEM if the function failed.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.152.1-1
Event History
Frequently Asked Questions
Under what condition does the vulnerable path fail?
The issue occurs when devm_kasprintf() fails in mchp_ipc_get_cluster_aggr_irq() and returns NULL. The resolved code detects that failure and returns -ENOMEM instead.
How can I determine whether a kernel includes the fix?
Check whether the kernel source or applied stable patches includes one of the referenced commits: 364edaedf4125825781a12c84c77699780d52a16, df5c9816986b2f4d754ef3aa65a92382e9b39c4a, or b233e7836d98d1790e71f5f3734a86409664f341.