CVE-2026-64241
Gravedad CVSS v3.1:
MEDIA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
24/07/2026
Última modificación:
13/08/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
gpio: rockchip: teardown bugs and resource leaks<br />
<br />
Address several teardown issues and resource leaks in the driver&#39;s remove<br />
path and error handling:<br />
<br />
1. Debounce clock reference leak: The debounce clock (bank->db_clk) is<br />
obtained using of_clk_get() which increments the clock&#39;s reference<br />
count, but clk_put() is never called. Register a devm action to<br />
cleanly release it on unbind. Note that of_clk_get(..., 1) remains<br />
necessary over devm_clk_get() because the DT binding does not define<br />
clock-names, precluding name-based lookup.<br />
<br />
2. Unregistered chained IRQ handler: The chained IRQ handler is not<br />
disconnected in remove(). If a stray interrupt fires after the driver<br />
is removed, the kernel attempts to execute a stale handler, leading<br />
to a panic. Fix this by clearing the handler in remove().<br />
<br />
3. IRQ domain leak: The linear IRQ domain and its generic chips are<br />
allocated manually during probe but never removed. Remove the IRQ<br />
domain during driver teardown to free the associated generic chips<br />
and mappings.<br />
<br />
[Bartosz: don&#39;t emit an error message on devres allocation failure]
Impacto
Puntuación base 3.x
5.50
Gravedad 3.x
MEDIA
Productos y versiones vulnerables
| CPE | Desde | Hasta |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.15 (incluyendo) | 6.12.96 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.13 (incluyendo) | 6.18.35 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.19 (incluyendo) | 7.0.12 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.1:rc5:*:*:*:*:*:* |
Para consultar la lista completa de nombres de CPE con productos y versiones, ver esta página



