CVE-2026-92524irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc() When its_irq_gic_domain_alloc() fails, the following its_vpe_irq_domain_free() fails to invoke its_vep_teardown() for the corresponding interrupt, which leaks the resource. Invoke its_vpe_teardown() in the error handling path to avoid the leak. [ tglx: Massaged change log ]
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 7d75bbb4bc1ad90386776459d37e4ddfe605671e before 82bccf7f9a12bf0eec9774968f6a853020ea26d3; 7d75bbb4bc1ad90386776459d37e4ddfe605671e builds before 6cd7e9b5463e1bceddcaf4acec6ca0f12553455b; 7d75bbb4bc1ad90386776459d37e4ddfe605671e builds before 05c199d6b806ed1cc64807062f9986f11315e8ab; from 7d75bbb4bc1ad90386776459d37e4ddfe605671e before c4643bcb3bdda96b7292d6ab6ed196755a5bc304; 7d75bbb4bc1ad90386776459d37e4ddfe605671e builds before 0d1951a1935a11c197272dbd38349033f0ef8991; 7d75bbb4bc1ad90386776459d37e4ddfe605671e builds before 6eb1f1414bf70185dad2525ecac5411db551faa2; from 7d75bbb4bc1ad90386776459d37e4ddfe605671e before d324c4353f64190a032c78d6e07be6d57ddfb2f1; from 7d75bbb4bc1ad90386776459d37e4ddfe605671e before 325ff3e78c64cd619d52b99f7c8b09a3f31e1495 | CNA record |
References
- https://git.kernel.org/stable/c/82bccf7f9a12bf0eec9774968f6a853020ea26d3
- https://git.kernel.org/stable/c/6cd7e9b5463e1bceddcaf4acec6ca0f12553455b
- https://git.kernel.org/stable/c/05c199d6b806ed1cc64807062f9986f11315e8ab
- https://git.kernel.org/stable/c/c4643bcb3bdda96b7292d6ab6ed196755a5bc304
- https://git.kernel.org/stable/c/0d1951a1935a11c197272dbd38349033f0ef8991
- https://git.kernel.org/stable/c/6eb1f1414bf70185dad2525ecac5411db551faa2
- https://git.kernel.org/stable/c/d324c4353f64190a032c78d6e07be6d57ddfb2f1
- https://git.kernel.org/stable/c/325ff3e78c64cd619d52b99f7c8b09a3f31e1495
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.