CVE-2026-53226

gpio: rockchip: fix generic IRQ chip leak on remove

State
Published
Severity
Not scored
Published
Jun 25, 2026
Updated
Oct 21, 2026
Reserved
Jun 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

gpio: rockchip: fix generic IRQ chip leak on remove

The driver allocates domain generic chips using irq_alloc_domain_generic_chips() during probe. However, on driver remove/teardown, the generic chips are not automatically freed when the IRQ domain is removed because the domain flags do not include IRQ_DOMAIN_FLAG_DESTROY_GC.

This causes both the domain generic chips structure and the associated generic chips to be leaked. Additionally, the generic chips remain on the global gc_list and may later be visited by generic IRQ chip suspend, resume, or shutdown callbacks after the GPIO bank has been removed, potentially resulting in a use-after-free and kernel crash.

Fix the resource leak by explicitly calling irq_domain_remove_generic_chips() before removing the IRQ domain in rockchip_gpio_remove().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 936ee2675eee1faca0dcdfa79165c7990422e0fc to before 6198123cac2ffd9d9a9d252dfa84ab81fb487ba3Affected
  • 936ee2675eee1faca0dcdfa79165c7990422e0fc to before 50c7a6d2bf179588ba2daee97be93d19c96a94afAffected
  • 936ee2675eee1faca0dcdfa79165c7990422e0fc to before bace7b99bfa555fe833aee8827b8004c43666d02Affected
  • 936ee2675eee1faca0dcdfa79165c7990422e0fc to before 1f34ea5f6114011092d9a5c8b901ad6741144a1dAffected
  • 936ee2675eee1faca0dcdfa79165c7990422e0fc to before 1c1e0fc88d6ef65bf15d517853251f75ab9d18c3Affected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.96 through 6.12.*Not affected
  • 6.18.36 through 6.18.*Not affected
  • 7.0.13 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.