Back to CVE records
Not yet scoredPublished Sep 4, 2026

CVE-2026-80822mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf()

Updated under an hour ago ()

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf() Add a check to see if devm_kasprintf() is not NULL in mchp_ipc_get_cluster_aggr_irq(), returning -ENOMEM if the function failed.

CVSS
Not yet scored
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Linux
NVD analysis
Received
Record last updated
Oct 19, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
from e4b1d67e71419c4af581890ecea84b04920d4116 before 364edaedf4125825781a12c84c77699780d52a16; from e4b1d67e71419c4af581890ecea84b04920d4116 before df5c9816986b2f4d754ef3aa65a92382e9b39c4a; from e4b1d67e71419c4af581890ecea84b04920d4116 before b233e7836d98d1790e71f5f3734a86409664f341; from e4b1d67e71419c4af581890ecea84b04920d4116 before b37c4d0a2fd90c0c31223acd37f763eb8953ed1a
CNA record

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.