In the Linux kernel, the following vulnerability has been resolved:

irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()

If irq_domain_translate_twocell() sets "hwirq" to >= MCHP_EIC_NIRQ (2) then
it results in an out of bounds access.

The code checks for invalid values, but doesn't set the error code. Return
-EINVAL in that case, instead of returning success.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00035.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
00fa3461c86dd289b441d4d5a6bb236064bd207b affected < 324c60a67c4b9668497940f667db14d216cc7b1b
00fa3461c86dd289b441d4d5a6bb236064bd207b affected < c21c606ad398eeb86a0f3aaff9ba4f2665e286c6
00fa3461c86dd289b441d4d5a6bb236064bd207b affected < 3873afcb57614c1aaa5b6715554d6d1c22cac95a
00fa3461c86dd289b441d4d5a6bb236064bd207b affected < 09efe7cfbf919c4d763bc425473fcfee0dc98356
00fa3461c86dd289b441d4d5a6bb236064bd207b affected < efd65e2e2fd96f7aaa5cb07d79bbbfcfc80aa552
00fa3461c86dd289b441d4d5a6bb236064bd207b affected < 7dbc0d40d8347bd9de55c904f59ea44bcc8dedb7
Linux Linux affected
Version Status Constraints
5.16 affected —
0 unaffected < 5.16
6.1.160 unaffected ≤ 6.1.*
6.6.120 unaffected ≤ 6.6.*
6.12.63 unaffected ≤ 6.12.*
6.17.13 unaffected ≤ 6.17.*
6.18.2 unaffected ≤ 6.18.*
6.19 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories
Source ID Title
Debian DSA Debian DSA DSA-6127-1 linux security update
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/09efe7cfbf919c4d763bc425473fcfee0dc98356 cve-icon cve-icon
https://git.kernel.org/stable/c/324c60a67c4b9668497940f667db14d216cc7b1b cve-icon cve-icon
https://git.kernel.org/stable/c/3873afcb57614c1aaa5b6715554d6d1c22cac95a cve-icon cve-icon
https://git.kernel.org/stable/c/7dbc0d40d8347bd9de55c904f59ea44bcc8dedb7 cve-icon cve-icon
https://git.kernel.org/stable/c/c21c606ad398eeb86a0f3aaff9ba4f2665e286c6 cve-icon cve-icon
https://git.kernel.org/stable/c/efd65e2e2fd96f7aaa5cb07d79bbbfcfc80aa552 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2026010519-CVE-2025-68766-0898@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-68766 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-68766 cve-icon
History

Sun, 11 Jan 2026 16:45:00 +0000

Type Values Removed Values Added
References

Tue, 06 Jan 2026 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Moderate

Mon, 05 Jan 2026 10:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() If irq_domain_translate_twocell() sets "hwirq" to >= MCHP_EIC_NIRQ (2) then it results in an out of bounds access. The code checks for invalid values, but doesn't set the error code. Return -EINVAL in that case, instead of returning success.
Title irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-02-09T08:33:11.102Z

Reserved: 2025-12-24T10:30:51.034Z

Link: CVE-2025-68766

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-01-05T10:15:57.817

Modified: 2026-01-11T17:15:58.913

Link: CVE-2025-68766

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-01-05T00:00:00Z

Links: CVE-2025-68766 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.