What’s Vulnerable › Vulnerabilities

CVE-2026-80822: mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf()

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-04 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf() Add a check to see if devm_kasprintf() is not NULL in mchp_ipc_get_cluster_aggr_irq(), returning -ENOMEM if the function failed.

Affected products

• Linux kernel: 6.14 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/364edaedf4125825781a12c84c77699780d52a16
• https://git.kernel.org/stable/c/b233e7836d98d1790e71f5f3734a86409664f341
• https://git.kernel.org/stable/c/b37c4d0a2fd90c0c31223acd37f763eb8953ed1a
• https://git.kernel.org/stable/c/df5c9816986b2f4d754ef3aa65a92382e9b39c4a

Get alerted when CVE-2026-80822 or the next vulnerability affects your stack