CVE-2026-89454

In the Linux kernel, the following vulnerability has been resolved: PCI: plda: Fix IRQ domain leaks in the error paths of plda_init_interrupts() plda_init_interrupts() initializes IRQ domains and creates IRQ mapping but does not unwind them when later step fails. If platform_get_irq() or either irq_create_mapping() fails in plda_init_interrupts(), the domains are never deinitialized. If irq_create_mapping() fails, port->intx_irq stays initialized. Hence, remove the IRQ domains in the error path by calling plda_pcie_irq_domain_deinit(). Since plda_pcie_irq_domain_deinit() now disposes of the intx_irq and msi_irq mappings itself before removing their domains, the msi_irq mapping failure path can go directly to err_irq_domain_deinit instead of disposing of port->intx_irq separately first. This issue was found by automated review of sashiko-bot [mani: commit log]

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/01b05cebe1e862e31e382359848d7dca02525a4f
https://git.kernel.org/stable/c/19a30bbb6477bfd7e3109b7a2943e6597ee9de37
https://git.kernel.org/stable/c/4b575052ea65423693726a21826d783cf3f1745e
https://git.kernel.org/stable/c/e54e8d2a0f9c8bf251ae4385ea4f4a68840fedad

Configurations

No configuration.

History

No history.

Information

Published : 2026-09-11 20:19

Updated : 2026-09-11 20:19

NVD link : CVE-2026-89454

Mitre link : CVE-2026-89454

CVE.ORG link : CVE-2026-89454

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-89454", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4602c370bdf6946b4e954a3db0ef5958aac2b7b4", "lessThan": "01b05cebe1e862e31e382359848d7dca02525a4f", "versionType": "git"}, {"status": "affected", "version": "4602c370bdf6946b4e954a3db0ef5958aac2b7b4", "lessThan": "4b575052ea65423693726a21826d783cf3f1745e", "versionType": "git"}, {"status": "affected", "version": "4602c370bdf6946b4e954a3db0ef5958aac2b7b4", "lessThan": "e54e8d2a0f9c8bf251ae4385ea4f4a68840fedad", "versionType": "git"}, {"status": "affected", "version": "4602c370bdf6946b4e954a3db0ef5958aac2b7b4", "lessThan": "19a30bbb6477bfd7e3109b7a2943e6597ee9de37", "versionType": "git"}], "programFiles": ["drivers/pci/controller/plda/pcie-plda-host.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.11"}, {"status": "unaffected", "version": "0", "lessThan": "6.11", "versionType": "semver"}, {"status": "unaffected", "version": "6.12.109", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.50", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.2.4", "versionType": "semver", "lessThanOrEqual": "7.2.*"}, {"status": "unaffected", "version": "7.3-rc1", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/pci/controller/plda/pcie-plda-host.c"], "defaultStatus": "affected"}]}], "published": "2026-09-11T20:19:26.097", "references": [{"url": "https://git.kernel.org/stable/c/01b05cebe1e862e31e382359848d7dca02525a4f", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/19a30bbb6477bfd7e3109b7a2943e6597ee9de37", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/4b575052ea65423693726a21826d783cf3f1745e", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/e54e8d2a0f9c8bf251ae4385ea4f4a68840fedad", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: plda: Fix IRQ domain leaks in the error paths of plda_init_interrupts()\n\nplda_init_interrupts() initializes IRQ domains and creates IRQ mapping but\ndoes not unwind them when later step fails.\n\nIf platform_get_irq() or either irq_create_mapping() fails\nin plda_init_interrupts(), the domains are never deinitialized. If\nirq_create_mapping() fails, port->intx_irq stays initialized.\n\nHence, remove the IRQ domains in the error path by calling\nplda_pcie_irq_domain_deinit().\n\nSince plda_pcie_irq_domain_deinit() now disposes of the intx_irq and\nmsi_irq mappings itself before removing their domains, the msi_irq\nmapping failure path can go directly to err_irq_domain_deinit instead of\ndisposing of port->intx_irq separately first.\n\nThis issue was found by automated review of sashiko-bot\n\n[mani: commit log]"}], "lastModified": "2026-09-11T20:19:26.097", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}