Threats tagged 'ghsa-w4mh-vmr5-87jc'

CVE-2026-43274 is a high-severity vulnerability in the Linux kernel's mailbox mchp-ipc-sbi driver. It involves an out-of-bounds access caused by indexing a dynamically allocated array with hartid, which may be non-contiguous or exceed array bounds. The issue is fixed by switching to cpuid indexing, which is guaranteed to be within valid range.