Riskcovery

CVE-2026-72026

irqchip/irq-riscv-imsic-early: Fix fwnode leak on state setup failure

State
Published
Severity
Not scored
Published
Aug 15, 2026
Updated
Aug 17, 2026
Reserved
Aug 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

irqchip/irq-riscv-imsic-early: Fix fwnode leak on state setup failure

imsic_early_acpi_init() allocates a firmware node before setting up the IMSIC state. If imsic_setup_state() fails, the function returns without freeing the allocated fwnode.

Free the fwnode and clear the global pointer on this error path, matching the cleanup already done when imsic_early_probe() fails.

[ tglx: Use a common cleanup path instead of copying code around ]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • fbe826b1c10699a70b81a441fe47b817d1019f37 to before a27f17bad38c5fea3c73281517869af0089a0451Affected
  • fbe826b1c10699a70b81a441fe47b817d1019f37 to before a5a367756926de1c21a013ea5ed7fc2219f4cb4fAffected
  • fbe826b1c10699a70b81a441fe47b817d1019f37 to before b321a046d7717225c07ba3f4b7b0a4758c2f9d58Affected
  • fbe826b1c10699a70b81a441fe47b817d1019f37 to before 1358126fbed104e5657955d3ba029b283687ba02Affected
LinuxLinux
  • 6.12Affected
  • before 6.12Not affected
  • 6.12.97 through 6.12.*Not affected
  • 6.18.40 through 6.18.*Not affected
  • 7.1.5 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.