CVE-2026-43274

kernel: mailbox: mchp-ipc-sbi: fix out-of-bounds access in mchp_ipc_get_cluster_aggr_irq()

Loading…

Severity

Low

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 6, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's mailbox subsystem, specifically within the mchp-ipc-sbi component. This vulnerability involves an out-of-bounds access in the mchp_ipc_get_cluster_aggr_irq() function. The cluster_cfg array, which holds per-CPU configuration structures, was incorrectly indexed using hartid, which could exceed the array's bounds. This issue can lead to memory corruption within the kernel.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-1285 · Improper Validation of Specified Index, Position, or Offset in Input