{"id":"CVE-2025-68766","state":"PUBLISHED","title":"irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nirqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()\n\nIf irq_domain_translate_twocell() sets \"hwirq\" to >= MCHP_EIC_NIRQ (2) then\nit results in an out of bounds access.\n\nThe code checks for invalid values, but doesn't set the error code.  Return\n-EINVAL in that case, instead of returning success.","publishedAt":"2026-01-05T09:44:13.935Z","updatedAt":"2026-05-11T21:52:56.285Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"00fa3461c86dd289b441d4d5a6bb236064bd207b","status":"affected","lessThan":"324c60a67c4b9668497940f667db14d216cc7b1b","versionType":"git"},{"version":"00fa3461c86dd289b441d4d5a6bb236064bd207b","status":"affected","lessThan":"c21c606ad398eeb86a0f3aaff9ba4f2665e286c6","versionType":"git"},{"version":"00fa3461c86dd289b441d4d5a6bb236064bd207b","status":"affected","lessThan":"3873afcb57614c1aaa5b6715554d6d1c22cac95a","versionType":"git"},{"version":"00fa3461c86dd289b441d4d5a6bb236064bd207b","status":"affected","lessThan":"09efe7cfbf919c4d763bc425473fcfee0dc98356","versionType":"git"},{"version":"00fa3461c86dd289b441d4d5a6bb236064bd207b","status":"affected","lessThan":"efd65e2e2fd96f7aaa5cb07d79bbbfcfc80aa552","versionType":"git"},{"version":"00fa3461c86dd289b441d4d5a6bb236064bd207b","status":"affected","lessThan":"7dbc0d40d8347bd9de55c904f59ea44bcc8dedb7","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/irqchip/irq-mchp-eic.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"5.16","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.16","versionType":"semver"},{"version":"6.1.160","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.120","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.63","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.17.13","status":"unaffected","lessThanOrEqual":"6.17.*","versionType":"semver"},{"version":"6.18.2","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"6.19","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/irqchip/irq-mchp-eic.c"]}],"references":["https://git.kernel.org/stable/c/324c60a67c4b9668497940f667db14d216cc7b1b","https://git.kernel.org/stable/c/c21c606ad398eeb86a0f3aaff9ba4f2665e286c6","https://git.kernel.org/stable/c/3873afcb57614c1aaa5b6715554d6d1c22cac95a","https://git.kernel.org/stable/c/09efe7cfbf919c4d763bc425473fcfee0dc98356","https://git.kernel.org/stable/c/efd65e2e2fd96f7aaa5cb07d79bbbfcfc80aa552","https://git.kernel.org/stable/c/7dbc0d40d8347bd9de55c904f59ea44bcc8dedb7"],"weaknesses":[],"ingestedAt":"2026-10-29T20:09:56.034Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/68xxx/CVE-2025-68766.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-68766","state":"PUBLISHED","datePublished":"2026-01-05T09:44:13.935Z","dateUpdated":"2026-05-11T21:52:56.285Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-12-24T10:30:51.034Z"},"containers":{"cna":{"title":"irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nirqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()\n\nIf irq_domain_translate_twocell() sets \"hwirq\" to >= MCHP_EIC_NIRQ (2) then\nit results in an out of bounds access.\n\nThe code checks for invalid values, but doesn't set the error code.  Return\n-EINVAL in that case, instead of returning success."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"00fa3461c86dd289b441d4d5a6bb236064bd207b","status":"affected","lessThan":"324c60a67c4b9668497940f667db14d216cc7b1b","versionType":"git"},{"version":"00fa3461c86dd289b441d4d5a6bb236064bd207b","status":"affected","lessThan":"c21c606ad398eeb86a0f3aaff9ba4f2665e286c6","versionType":"git"},{"version":"00fa3461c86dd289b441d4d5a6bb236064bd207b","status":"affected","lessThan":"3873afcb57614c1aaa5b6715554d6d1c22cac95a","versionType":"git"},{"version":"00fa3461c86dd289b441d4d5a6bb236064bd207b","status":"affected","lessThan":"09efe7cfbf919c4d763bc425473fcfee0dc98356","versionType":"git"},{"version":"00fa3461c86dd289b441d4d5a6bb236064bd207b","status":"affected","lessThan":"efd65e2e2fd96f7aaa5cb07d79bbbfcfc80aa552","versionType":"git"},{"version":"00fa3461c86dd289b441d4d5a6bb236064bd207b","status":"affected","lessThan":"7dbc0d40d8347bd9de55c904f59ea44bcc8dedb7","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/irqchip/irq-mchp-eic.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"5.16","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.16","versionType":"semver"},{"version":"6.1.160","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.120","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.63","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.17.13","status":"unaffected","lessThanOrEqual":"6.17.*","versionType":"semver"},{"version":"6.18.2","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"6.19","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/irqchip/irq-mchp-eic.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/324c60a67c4b9668497940f667db14d216cc7b1b"},{"url":"https://git.kernel.org/stable/c/c21c606ad398eeb86a0f3aaff9ba4f2665e286c6"},{"url":"https://git.kernel.org/stable/c/3873afcb57614c1aaa5b6715554d6d1c22cac95a"},{"url":"https://git.kernel.org/stable/c/09efe7cfbf919c4d763bc425473fcfee0dc98356"},{"url":"https://git.kernel.org/stable/c/efd65e2e2fd96f7aaa5cb07d79bbbfcfc80aa552"},{"url":"https://git.kernel.org/stable/c/7dbc0d40d8347bd9de55c904f59ea44bcc8dedb7"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T21:52:56.285Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.16","versionEndExcluding":"6.1.160"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.16","versionEndExcluding":"6.6.120"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.16","versionEndExcluding":"6.12.63"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.16","versionEndExcluding":"6.17.13"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.16","versionEndExcluding":"6.18.2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.16","versionEndExcluding":"6.19"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}