CVE-2026-64241
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
24/07/2026
Última modificación:
24/07/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
gpio: rockchip: teardown bugs and resource leaks<br />
<br />
Address several teardown issues and resource leaks in the driver&#39;s remove<br />
path and error handling:<br />
<br />
1. Debounce clock reference leak: The debounce clock (bank->db_clk) is<br />
obtained using of_clk_get() which increments the clock&#39;s reference<br />
count, but clk_put() is never called. Register a devm action to<br />
cleanly release it on unbind. Note that of_clk_get(..., 1) remains<br />
necessary over devm_clk_get() because the DT binding does not define<br />
clock-names, precluding name-based lookup.<br />
<br />
2. Unregistered chained IRQ handler: The chained IRQ handler is not<br />
disconnected in remove(). If a stray interrupt fires after the driver<br />
is removed, the kernel attempts to execute a stale handler, leading<br />
to a panic. Fix this by clearing the handler in remove().<br />
<br />
3. IRQ domain leak: The linear IRQ domain and its generic chips are<br />
allocated manually during probe but never removed. Remove the IRQ<br />
domain during driver teardown to free the associated generic chips<br />
and mappings.<br />
<br />
[Bartosz: don&#39;t emit an error message on devres allocation failure]



