Medium 5.5Published Jun 25, 2026

CVE-2026-53226gpio: rockchip: fix generic IRQ chip leak on remove

Updated under an hour ago (Oct 27, 2026, 9:23 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: gpio: rockchip: fix generic IRQ chip leak on remove The driver allocates domain generic chips using irq_alloc_domain_generic_chips() during probe. However, on driver remove/teardown, the generic chips are not automatically freed when the IRQ domain is removed because the domain flags do not include IRQ_DOMAIN_FLAG_DESTROY_GC. This causes both the domain generic chips structure and the associated generic chips to be leaked. Additionally, the generic chips remain on the global gc_list and may later be visited by generic IRQ chip suspend, resume, or shutdown callbacks after the GPIO bank has been removed, potentially resulting in a use-after-free and kernel crash. Fix the resource leak by explicitly calling irq_domain_remove_generic_chips() before removing the IRQ domain in rockchip_gpio_remove().

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 21, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 936ee2675eee1faca0dcdfa79165c7990422e0fc before 6198123cac2ffd9d9a9d252dfa84ab81fb487ba3; 936ee2675eee1faca0dcdfa79165c7990422e0fc builds before 50c7a6d2bf179588ba2daee97be93d19c96a94af; from 936ee2675eee1faca0dcdfa79165c7990422e0fc before bace7b99bfa555fe833aee8827b8004c43666d02; 936ee2675eee1faca0dcdfa79165c7990422e0fc builds before 1f34ea5f6114011092d9a5c8b901ad6741144a1d; 936ee2675eee1faca0dcdfa79165c7990422e0fc builds before 1c1e0fc88d6ef65bf15d517853251f75ab9d18c3	CNA record
linux linux_kernel linux:linux_kernel	from 5.15 before 6.18.36; from 6.19 before 7.0.13; 7.1; 7.1; 7.1; 7.1; 7.1; 7.1; and 1 more ranges	NVD

References

References

https://git.kernel.org/stable/c/6198123cac2ffd9d9a9d252dfa84ab81fb487ba3
https://git.kernel.org/stable/c/50c7a6d2bf179588ba2daee97be93d19c96a94af
https://git.kernel.org/stable/c/bace7b99bfa555fe833aee8827b8004c43666d02	patch
https://git.kernel.org/stable/c/1f34ea5f6114011092d9a5c8b901ad6741144a1d	patch
https://git.kernel.org/stable/c/1c1e0fc88d6ef65bf15d517853251f75ab9d18c3	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.