Not yet scoredPublished Sep 17, 2026

CVE-2026-92524irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc()

Updated under an hour ago (Oct 26, 2026, 8:10 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc() When its_irq_gic_domain_alloc() fails, the following its_vpe_irq_domain_free() fails to invoke its_vep_teardown() for the corresponding interrupt, which leaks the resource. Invoke its_vpe_teardown() in the error handling path to avoid the leak. [ tglx: Massaged change log ]

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 7d75bbb4bc1ad90386776459d37e4ddfe605671e before 82bccf7f9a12bf0eec9774968f6a853020ea26d3; 7d75bbb4bc1ad90386776459d37e4ddfe605671e builds before 6cd7e9b5463e1bceddcaf4acec6ca0f12553455b; 7d75bbb4bc1ad90386776459d37e4ddfe605671e builds before 05c199d6b806ed1cc64807062f9986f11315e8ab; from 7d75bbb4bc1ad90386776459d37e4ddfe605671e before c4643bcb3bdda96b7292d6ab6ed196755a5bc304; 7d75bbb4bc1ad90386776459d37e4ddfe605671e builds before 0d1951a1935a11c197272dbd38349033f0ef8991; 7d75bbb4bc1ad90386776459d37e4ddfe605671e builds before 6eb1f1414bf70185dad2525ecac5411db551faa2; from 7d75bbb4bc1ad90386776459d37e4ddfe605671e before d324c4353f64190a032c78d6e07be6d57ddfb2f1; from 7d75bbb4bc1ad90386776459d37e4ddfe605671e before 325ff3e78c64cd619d52b99f7c8b09a3f31e1495	CNA record

References

References

https://git.kernel.org/stable/c/82bccf7f9a12bf0eec9774968f6a853020ea26d3
https://git.kernel.org/stable/c/6cd7e9b5463e1bceddcaf4acec6ca0f12553455b
https://git.kernel.org/stable/c/05c199d6b806ed1cc64807062f9986f11315e8ab
https://git.kernel.org/stable/c/c4643bcb3bdda96b7292d6ab6ed196755a5bc304
https://git.kernel.org/stable/c/0d1951a1935a11c197272dbd38349033f0ef8991
https://git.kernel.org/stable/c/6eb1f1414bf70185dad2525ecac5411db551faa2
https://git.kernel.org/stable/c/d324c4353f64190a032c78d6e07be6d57ddfb2f1
https://git.kernel.org/stable/c/325ff3e78c64cd619d52b99f7c8b09a3f31e1495

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.