CVE-2026-64462: PCI: altera: Fix resource leaks on probe failure
In the Linux kernel, the following vulnerability has been resolved:
PCI: altera: Fix resource leaks on probe failure
The chained IRQ handler is set during probe, but is only removed during the driver remove(). If pcihostprobe() fails, the handler and INTx IRQ domain remain set even though the devm-managed host bridge storage containing struct alterapcie will be released, leaving the handler with a stale data pointer.
Interrupts are also enabled before pcihostprobe() is called. If probe fails after that point, the controller interrupt source should be disabled before the chained handler and INTx domain are removed.
So set the chained handler only after the INTx domain has been created. Disable controller interrupts during IRQ teardown, and tear the IRQ setup down if pcihostprobe() fails.
[mani: commit log]
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.145.2-1 - Configuration
Modify the altera PCI host probe/remove flow so the chained handler is set only after the INTx domain is created, and ensure it is removed before the INTx domain is removed during teardown. Also disable the controller interrupt source if pci_host_probe() fails after the point where the devm-managed host bridge storage would otherwise be released.
Linux kernel PCI: altera chained IRQ handler setup/teardown order = Set chained handler only after the INTx domain has been created; remove chained handler before the INTx domain is removed
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64462?
CVE-2026-64462 has a risk rating of 29, indicating a moderate severity level.
How do I fix CVE-2026-64462?
To fix CVE-2026-64462, you should apply the latest updates or patches for the Linux Kernel that address this vulnerability.
What systems are affected by CVE-2026-64462?
CVE-2026-64462 affects systems running the vulnerable versions of the Linux Kernel with PCI: altera drivers.
What are the potential impacts of CVE-2026-64462?
The potential impact of CVE-2026-64462 includes resource leaks leading to degraded system performance or stability.
When was CVE-2026-64462 published?
CVE-2026-64462 was published on July 25, 2026.