CVE-2026-92524

irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc()

State: Published
Severity: Not scored
Published: Sep 17, 2026
Updated: Oct 19, 2026
Reserved: Sep 16, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc()

When its_irq_gic_domain_alloc() fails, the following its_vpe_irq_domain_free() fails to invoke its_vep_teardown() for the corresponding interrupt, which leaks the resource.

Invoke its_vpe_teardown() in the error handling path to avoid the leak.

[ tglx: Massaged change log ]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	7d75bbb4bc1ad90386776459d37e4ddfe605671e to before 82bccf7f9a12bf0eec9774968f6a853020ea26d3Affected 7d75bbb4bc1ad90386776459d37e4ddfe605671e to before 6cd7e9b5463e1bceddcaf4acec6ca0f12553455bAffected 7d75bbb4bc1ad90386776459d37e4ddfe605671e to before 05c199d6b806ed1cc64807062f9986f11315e8abAffected 7d75bbb4bc1ad90386776459d37e4ddfe605671e to before c4643bcb3bdda96b7292d6ab6ed196755a5bc304Affected 7d75bbb4bc1ad90386776459d37e4ddfe605671e to before 0d1951a1935a11c197272dbd38349033f0ef8991Affected 7d75bbb4bc1ad90386776459d37e4ddfe605671e to before 6eb1f1414bf70185dad2525ecac5411db551faa2Affected 7d75bbb4bc1ad90386776459d37e4ddfe605671e to before d324c4353f64190a032c78d6e07be6d57ddfb2f1Affected 7d75bbb4bc1ad90386776459d37e4ddfe605671e to before 325ff3e78c64cd619d52b99f7c8b09a3f31e1495Affected
LinuxLinux	4.14Affected before 4.14Not affected 5.10.270 through 5.10.Not affected 5.15.221 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.52 through 6.18.Not affected 7.2.6 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

7d75bbb4bc1ad90386776459d37e4ddfe605671e to before 82bccf7f9a12bf0eec9774968f6a853020ea26d3Affected
7d75bbb4bc1ad90386776459d37e4ddfe605671e to before 6cd7e9b5463e1bceddcaf4acec6ca0f12553455bAffected
7d75bbb4bc1ad90386776459d37e4ddfe605671e to before 05c199d6b806ed1cc64807062f9986f11315e8abAffected
7d75bbb4bc1ad90386776459d37e4ddfe605671e to before c4643bcb3bdda96b7292d6ab6ed196755a5bc304Affected
7d75bbb4bc1ad90386776459d37e4ddfe605671e to before 0d1951a1935a11c197272dbd38349033f0ef8991Affected
7d75bbb4bc1ad90386776459d37e4ddfe605671e to before 6eb1f1414bf70185dad2525ecac5411db551faa2Affected
7d75bbb4bc1ad90386776459d37e4ddfe605671e to before d324c4353f64190a032c78d6e07be6d57ddfb2f1Affected
7d75bbb4bc1ad90386776459d37e4ddfe605671e to before 325ff3e78c64cd619d52b99f7c8b09a3f31e1495Affected

LinuxLinux

4.14Affected
before 4.14Not affected
5.10.270 through 5.10.*Not affected
5.15.221 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.52 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.