CVE-2026-80822: Linux kernel · mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf()
Source GCVE Database
Not known to be exploited.
Data as of 26 Oct 2026, 13:47 UTC
Rated by Threat Radar · CVSS not yet scored by NVD
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 6% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Exploitation evidence
Disclosed: evidence found.
CVE published 4 Sep 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
Description
In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf() Add a check to see if devm_kasprintf() is not NULL in mchp_ipc_get_cluster_aggr_irq(), returning -ENOMEM if the function failed.
References
- nvd.nist.gov/vuln/detail/CVE-2026-80822 (opens in a new tab)
- git.kernel.org/stable/c/364edaedf4125825781a12c84c77699780d52a16 (opens in a new tab)
- git.kernel.org/stable/c/b233e7836d98d1790e71f5f3734a86409664f341 (opens in a new tab)
- git.kernel.org/stable/c/b37c4d0a2fd90c0c31223acd37f763eb8953ed1a (opens in a new tab)
- git.kernel.org/stable/c/df5c9816986b2f4d754ef3aa65a92382e9b39c4a (opens in a new tab)