CVE-2026-72324

In the Linux kernel, the following vulnerability has been resolved: gpio: mvebu: free generic chips on unbind irq_alloc_domain_generic_chips() allocates generic chip data that must be freed via irq_domain_remove_generic_chips(). The devres action mvebu_gpio_remove_irq_domain() only called irq_domain_remove(), which only frees the generic chips if IRQ_DOMAIN_FLAG_DESTROY_GC is set. Call irq_domain_remove_generic_chips() explicitly before irq_domain_remove() instead.

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/3649b04f86b95243fa0c845695051455fa2ba40b
https://git.kernel.org/stable/c/3bfcce441c552133adeeb99c294d0ce8a62612ef
https://git.kernel.org/stable/c/b11c513ad943f35cf5e8007d3a56279c79b7ed4b
https://git.kernel.org/stable/c/d73e4d790db611da7439e78a6ab6cb32e7885ab8

Configurations

No configuration.

History

No history.

Information

Published : 2026-08-15 06:22

Updated : 2026-08-17 06:18

NVD link : CVE-2026-72324

Mitre link : CVE-2026-72324

CVE.ORG link : CVE-2026-72324

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-72324", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "812d47889a8e418d7bea9bec383581a34c19183e", "lessThan": "3649b04f86b95243fa0c845695051455fa2ba40b", "versionType": "git"}, {"status": "affected", "version": "812d47889a8e418d7bea9bec383581a34c19183e", "lessThan": "3bfcce441c552133adeeb99c294d0ce8a62612ef", "versionType": "git"}, {"status": "affected", "version": "812d47889a8e418d7bea9bec383581a34c19183e", "lessThan": "d73e4d790db611da7439e78a6ab6cb32e7885ab8", "versionType": "git"}, {"status": "affected", "version": "812d47889a8e418d7bea9bec383581a34c19183e", "lessThan": "b11c513ad943f35cf5e8007d3a56279c79b7ed4b", "versionType": "git"}, {"status": "affected", "version": "f0cde54863da281cec1ed85497b4ec58d29c1460", "versionType": "git"}, {"status": "affected", "version": "7a9239fd04802ee6ddf82d211cff3ee7df9c473a", "versionType": "git"}, {"status": "affected", "version": "3.16.40", "lessThan": "3.17", "versionType": "semver"}, {"status": "affected", "version": "4.8.9", "lessThan": "4.9", "versionType": "semver"}], "programFiles": ["drivers/gpio/gpio-mvebu.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.9"}, {"status": "unaffected", "version": "0", "lessThan": "4.9", "versionType": "semver"}, {"status": "unaffected", "version": "6.12.97", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.40", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.1.5", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/gpio/gpio-mvebu.c"], "defaultStatus": "affected"}]}], "published": "2026-08-15T06:22:05.447", "references": [{"url": "https://git.kernel.org/stable/c/3649b04f86b95243fa0c845695051455fa2ba40b", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/3bfcce441c552133adeeb99c294d0ce8a62612ef", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/b11c513ad943f35cf5e8007d3a56279c79b7ed4b", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/d73e4d790db611da7439e78a6ab6cb32e7885ab8", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: mvebu: free generic chips on unbind\n\nirq_alloc_domain_generic_chips() allocates generic chip data that must\nbe freed via irq_domain_remove_generic_chips(). The devres action\nmvebu_gpio_remove_irq_domain() only called irq_domain_remove(), which\nonly frees the generic chips if IRQ_DOMAIN_FLAG_DESTROY_GC is set.\nCall irq_domain_remove_generic_chips() explicitly before\nirq_domain_remove() instead."}], "lastModified": "2026-08-17T06:18:35.963", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}