CVE-2026-92524: irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc()
In the Linux kernel, the following vulnerability has been resolved:
irqchip/gic-v3-its: Prevent leak in itsvpeirqdomainalloc()
When itsirqgicdomainalloc() fails, the following itsvpeirqdomainfree() fails to invoke itsvepteardown() for the corresponding interrupt, which leaks the resource.
Invoke itsvpeteardown() in the error handling path to avoid the leak.
[ tglx: Massaged change log ]
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Invoke its_vpe_teardown() in the error handling path to avoid the leak (irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc(); ensure its_vpe_irq_domain_free() invokes its_vpe_teardown()).
Event History
Frequently Asked Questions
Under what condition does the resource leak occur?
The leak occurs when its_irq_gic_domain_alloc() fails during allocation in its_vpe_irq_domain_alloc(). The subsequent cleanup path does not invoke its_vpe_teardown() for the affected interrupt.
What change addresses the issue?
The error-handling path invokes its_vpe_teardown() so that resources associated with the corresponding interrupt are released when allocation fails.