CVE-2026-63862: PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found
In the Linux kernel, the following vulnerability has been resolved:
PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found
In mtkpciesetupirq(), the IRQ domains are allocated before the controller's IRQ is fetched. If the latter fails, the function directly returns an error, without cleaning up the allocated domains.
Hence, reverse the order so that the IRQ domains are allocated after the controller's IRQ is found.
This was flagged by Sashiko during a review of "[PATCH v6 0/7] PCI: mediatek-gen3: add power control support".
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-63862?
CVE-2026-63862 has a severity score of 8, indicating high risk.
How do I fix CVE-2026-63862?
To resolve CVE-2026-63862, update the Linux kernel to the latest patched version that addresses this vulnerability.
What systems are affected by CVE-2026-63862?
CVE-2026-63862 affects the Linux kernel, specifically versions that include the mediatek-gen3 PCI driver.
What consequences can occur if CVE-2026-63862 is exploited?
Exploitation of CVE-2026-63862 may lead to improper handling of IRQ domains, potentially causing system instability.
Is CVE-2026-63862 a local or remote vulnerability?
CVE-2026-63862 is primarily considered a local vulnerability, as it requires additional privileges to exploit.