Not yet scoredPublished Sep 4, 2026

CVE-2026-80822mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf()

Updated under an hour ago (Oct 26, 2026, 2:50 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf() Add a check to see if devm_kasprintf() is not NULL in mchp_ipc_get_cluster_aggr_irq(), returning -ENOMEM if the function failed.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from e4b1d67e71419c4af581890ecea84b04920d4116 before 364edaedf4125825781a12c84c77699780d52a16; from e4b1d67e71419c4af581890ecea84b04920d4116 before df5c9816986b2f4d754ef3aa65a92382e9b39c4a; from e4b1d67e71419c4af581890ecea84b04920d4116 before b233e7836d98d1790e71f5f3734a86409664f341; from e4b1d67e71419c4af581890ecea84b04920d4116 before b37c4d0a2fd90c0c31223acd37f763eb8953ed1a	CNA record

References

References

https://git.kernel.org/stable/c/364edaedf4125825781a12c84c77699780d52a16
https://git.kernel.org/stable/c/df5c9816986b2f4d754ef3aa65a92382e9b39c4a
https://git.kernel.org/stable/c/b233e7836d98d1790e71f5f3734a86409664f341
https://git.kernel.org/stable/c/b37c4d0a2fd90c0c31223acd37f763eb8953ed1a

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.