CVE-2026-43274

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds access issue exists in the mchp ipc get cluster aggr irq() function. The cluster cfg array, which is dynamically allocated for per-CPU configuration structures based on the number of online CPUs, was indexed using hartid. Because hartid can be non-contiguous or exceed the array bounds, this leads to out-of-bounds access. The issue is resolved by using cpuid as the index, which is guaranteed to be within the valid range provided by for each online cpu().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.