CVE-2026-92524

irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc()

N/A
Published: September 17, 2026 at 04:10 PM UTC
Updated: October 19, 2026 at 10:16 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc() When its_irq_gic_domain_alloc() fails, the following its_vpe_irq_domain_free() fails to invoke its_vep_teardown() for the corresponding interrupt, which leaks the resource. Invoke its_vpe_teardown() in the error handling path to avoid the leak. [ tglx: Massaged change log ]

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

4.147d75bbb4bc1ad90386776459d37e4ddfe605671e
Vendor states this is fixed in 05c199d6b806ed1cc64807062f9986f11315e8ab (fixed)
Vendor states this is fixed in 0d1951a1935a11c197272dbd38349033f0ef8991 (fixed)
Vendor states this is fixed in 325ff3e78c64cd619d52b99f7c8b09a3f31e1495 (fixed)
Vendor states this is fixed in 6cd7e9b5463e1bceddcaf4acec6ca0f12553455b (fixed)
Vendor states this is fixed in 6eb1f1414bf70185dad2525ecac5411db551faa2 (fixed)
Vendor states this is fixed in 82bccf7f9a12bf0eec9774968f6a853020ea26d3 (fixed)
Vendor states this is fixed in c4643bcb3bdda96b7292d6ab6ed196755a5bc304 (fixed)
Vendor states this is fixed in d324c4353f64190a032c78d6e07be6d57ddfb2f1 (fixed)
Vendor states this is fixed in 4.14 (unaffected)
Vendor states this is fixed in 5.10.270 (unaffected)
Vendor states this is fixed in 5.15.221 (unaffected)
Vendor states this is fixed in 6.1.188 (unaffected)
Vendor states this is fixed in 6.12.110 (unaffected)
Vendor states this is fixed in 6.18.52 (unaffected)
Vendor states this is fixed in 6.6.157 (unaffected)
Vendor states this is fixed in 7.2.6 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card