Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-43274

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
06/05/2026
Última modificación:
06/05/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> mailbox: mchp-ipc-sbi: fix out-of-bounds access in mchp_ipc_get_cluster_aggr_irq()<br /> <br /> The cluster_cfg array is dynamically allocated to hold per-CPU<br /> configuration structures, with its size based on the number of online<br /> CPUs. Previously, this array was indexed using hartid, which may be<br /> non-contiguous or exceed the bounds of the array, leading to<br /> out-of-bounds access.<br /> Switch to using cpuid as the index, as it is guaranteed to be within<br /> the valid range provided by for_each_online_cpu().

Impacto