CVE-2026-53226

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
25/06/2026
Last modified:
18/07/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> gpio: rockchip: fix generic IRQ chip leak on remove<br /> <br /> The driver allocates domain generic chips using<br /> irq_alloc_domain_generic_chips() during probe. However, on driver<br /> remove/teardown, the generic chips are not automatically freed when the<br /> IRQ domain is removed because the domain flags do not include<br /> IRQ_DOMAIN_FLAG_DESTROY_GC.<br /> <br /> This causes both the domain generic chips structure and the associated<br /> generic chips to be leaked. Additionally, the generic chips remain on<br /> the global gc_list and may later be visited by generic IRQ chip suspend,<br /> resume, or shutdown callbacks after the GPIO bank has been removed,<br /> potentially resulting in a use-after-free and kernel crash.<br /> <br /> Fix the resource leak by explicitly calling<br /> irq_domain_remove_generic_chips() before removing the IRQ domain in<br /> rockchip_gpio_remove().

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.15 (including) 6.18.36 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.19 (including) 7.0.13 (excluding)
cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc7:*:*:*:*:*:*