Riskcovery

CVE-2026-63862

PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found

State
Published
Severity
Not scored
Published
Jul 19, 2026
Updated
Jul 19, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found

In mtk_pcie_setup_irq(), the IRQ domains are allocated before the controller's IRQ is fetched. If the latter fails, the function directly returns an error, without cleaning up the allocated domains.

Hence, reverse the order so that the IRQ domains are allocated after the controller's IRQ is found.

This was flagged by Sashiko during a review of "[PATCH v6 0/7] PCI: mediatek-gen3: add power control support".

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 814cceebba9b7d1306b8d49587ffb0e81f7b73af to before abd3c1927d33766aef39c4640880e3d2637429c2Affected
  • 814cceebba9b7d1306b8d49587ffb0e81f7b73af to before 07a5ecb94768cbf76fe659e9924000e9ced0c8a6Affected
  • 814cceebba9b7d1306b8d49587ffb0e81f7b73af to before 946b31b5a699a2760ee52af0055e5ebf29c5f4cbAffected
  • 814cceebba9b7d1306b8d49587ffb0e81f7b73af to before 0a2d60edc3e57c9512e239ebdfd12204d3368560Affected
  • 814cceebba9b7d1306b8d49587ffb0e81f7b73af to before 215d4273347b9010a9deae378b0df79c163f707dAffected
  • 814cceebba9b7d1306b8d49587ffb0e81f7b73af to before 5573c44cb3fd01a9f62d569ae9ac870ef5f0e0baAffected
LinuxLinux
  • 5.13Affected
  • before 5.13Not affected
  • 6.1.175 through 6.1.*Not affected
  • 6.6.141 through 6.6.*Not affected
  • 6.12.91 through 6.12.*Not affected
  • 6.18.33 through 6.18.*Not affected
  • 7.0.10 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.