CVE-2026-72324
N/A
N/A
Summary
In the Linux kernel, the following vulnerability has been resolved:
gpio: mvebu: free generic chips on unbind
irq_alloc_domain_generic_chips() allocates generic chip data that must be freed via irq_domain_remove_generic_chips(). The devres action mvebu_gpio_remove_irq_domain() only called irq_domain_remove(), which only frees the generic chips if IRQ_DOMAIN_FLAG_DESTROY_GC is set. Call irq_domain_remove_generic_chips() explicitly before irq_domain_remove() instead.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 812d47889a8e418d7bea9bec383581a34c19183e < 3649b04f86b95243fa0c845695051455fa2ba40b | affected |
| Linux | Linux | 812d47889a8e418d7bea9bec383581a34c19183e < 3bfcce441c552133adeeb99c294d0ce8a62612ef | affected |
| Linux | Linux | 812d47889a8e418d7bea9bec383581a34c19183e < d73e4d790db611da7439e78a6ab6cb32e7885ab8 | affected |
| Linux | Linux | 812d47889a8e418d7bea9bec383581a34c19183e < b11c513ad943f35cf5e8007d3a56279c79b7ed4b | affected |
| Linux | Linux | f0cde54863da281cec1ed85497b4ec58d29c1460 | affected |
| Linux | Linux | 7a9239fd04802ee6ddf82d211cff3ee7df9c473a | affected |
| Linux | Linux | 3.16.40 < 3.17 | affected |
| Linux | Linux | 4.8.9 < 4.9 | affected |
| Linux | Linux | 4.9 | affected |
| Linux | Linux | 0 < 4.9 | unaffected |
| Linux | Linux | 6.12.97 <= 6.12.* | unaffected |
| Linux | Linux | 6.18.40 <= 6.18.* | unaffected |
| Linux | Linux | 7.1.5 <= 7.1.* | unaffected |
| Linux | Linux | 7.2 <= * | unaffected |
Weaknesses
References
- https://git.kernel.org/stable/c/3649b04f86b95243fa0c845695051455fa2ba40b
- https://git.kernel.org/stable/c/3bfcce441c552133adeeb99c294d0ce8a62612ef
- https://git.kernel.org/stable/c/d73e4d790db611da7439e78a6ab6cb32e7885ab8
- https://git.kernel.org/stable/c/b11c513ad943f35cf5e8007d3a56279c79b7ed4b
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.