CVE-2026-64461

Source
https://cve.org/CVERecord?id=CVE-2026-64461
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64461.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-64461
Downstream
Published
2026-07-25T08:51:28.309Z
Modified
2026-07-27T04:03:22.263619418Z
Summary
PCI: mediatek: Fix IRQ domain leak when port fails to enable
Details

In the Linux kernel, the following vulnerability has been resolved:

PCI: mediatek: Fix IRQ domain leak when port fails to enable

When mtkpcieenableport() fails, mtkpcieportfree() removes the port from pcie->ports and frees the port structure. However, the IRQ domains set up earlier by mtkpcieinitirqdomain() are never freed.

Fix this by refactoring mtkpcieirqteardown() into a per-port helper, mtkpcieirqteardownport(), and calling it from mtkpciesetup() when mtkpcieenableport() fails. Since the IRQ teardown must only happen in the probe error path (during resume, child devices may have active MSI mappings and the NOIRQ context prohibits sleeping locks), mtkpcieenable_port() is changed to return an error code so callers can distinguish the two paths and act accordingly.

This issue was reported by Sashiko while reviewing the EcoNet EN7528 SoC support series.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64461.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
b099631df160ec608cd6147f4d20a8042567a5b8
Fixed
e23da72ef202654a7d5269885c4fa39a8404db76
Fixed
ec7c05eed47d8b15c45380aee7ca168a82e15035
Fixed
1fbe8972a39548a633d06d7b03a01b7b119a2c12
Fixed
fe8c701a53c2816cd82301f66c671d952003c1b0
Fixed
ce52e494a7555bdae1d990a2654fd7547ef6d986
Fixed
6e6a529d6f779413379b4404c9ef6a36c0337225
Fixed
df77314b3bedbd9ad5d6f0682f98b99e3c5f7e2e
Fixed
f865a57896bd92d7662eb2818d8f48872e2cbbc7

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64461.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.14.0
Fixed
5.10.261
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.212
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.178
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.145
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.97
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.39
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.4

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64461.json"