PT-2026-52321 · Linux · Linux

Publicado 2026-06-25 · Atualizado 2026-06-25 · CVE-2026-53226

Mitre

In the Linux kernel, the following vulnerability has been resolved:

gpio: rockchip: fix generic IRQ chip leak on remove

The driver allocates domain generic chips using irq alloc domain generic chips() during probe. However, on driver remove/teardown, the generic chips are not automatically freed when the IRQ domain is removed because the domain flags do not include IRQ DOMAIN FLAG DESTROY GC.

This causes both the domain generic chips structure and the associated generic chips to be leaked. Additionally, the generic chips remain on the global gc list and may later be visited by generic IRQ chip suspend, resume, or shutdown callbacks after the GPIO bank has been removed, potentially resulting in a use-after-free and kernel crash.

Fix the resource leak by explicitly calling irq domain remove generic chips() before removing the IRQ domain in rockchip gpio remove().

Identificadores relacionados

CVE-2026-53226

Produtos afetados

Linux

Referências · 4

• https://git.kernel.org/stable/c/1f34ea5f6114011092d9a5c8b901ad6741144a1d · Nota
• https://git.kernel.org/stable/c/1c1e0fc88d6ef65bf15d517853251f75ab9d18c3 · Nota
• https://git.kernel.org/stable/c/bace7b99bfa555fe833aee8827b8004c43666d02 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-53226 · Nota de Segurança