Bug 2507221 (CVE-2026-64462) - CVE-2026-64462 kernel: PCI: altera: Fix resource leaks on probe failure
Summary: CVE-2026-64462 kernel: PCI: altera: Fix resource leaks on probe failure
Keywords:
Status: NEW
Alias: CVE-2026-64462
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
unspecified
unspecified
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-07-25 10:11 UTC by OSIDB Bzimport
Modified: 2026-08-02 13:25 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-07-25 10:11:24 UTC
In the Linux kernel, the following vulnerability has been resolved:

PCI: altera: Fix resource leaks on probe failure

The chained IRQ handler is set during probe, but is only removed during the
driver remove(). If pci_host_probe() fails, the handler and INTx IRQ
domain remain set even though the devm-managed host bridge storage
containing struct altera_pcie will be released, leaving the handler with
a stale data pointer.

Interrupts are also enabled before pci_host_probe() is called. If probe
fails after that point, the controller interrupt source should be disabled
before the chained handler and INTx domain are removed.

So set the chained handler only after the INTx domain has been created.
Disable controller interrupts during IRQ teardown, and tear the IRQ setup
down if pci_host_probe() fails.

[mani: commit log]

Comment 1 Mauro Matteo Cascella 2026-08-02 13:21:53 UTC
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2026072543-CVE-2026-64462-85ea@gregkh/T


Note You need to log in before you can comment on or make changes to this bug.