CVE-2026-53226

Medium

Description

In the Linux kernel, the following vulnerability has been resolved: gpio: rockchip: fix generic IRQ chip leak on remove The driver allocates domain generic chips using irq_alloc_domain_generic_chips() during probe. However, on driver remove/teardown, the generic chips are not automatically freed when the IRQ domain is removed because the domain flags do not include IRQ_DOMAIN_FLAG_DESTROY_GC. This causes both the domain generic chips structure and the associated generic chips to be leaked. Additionally, the generic chips remain on the global gc_list and may later be visited by generic IRQ chip suspend, resume, or shutdown callbacks after the GPIO bank has been removed, potentially resulting in a use-after-free and kernel crash. Fix the resource leak by explicitly calling irq_domain_remove_generic_chips() before removing the IRQ domain in rockchip_gpio_remove().

SeverityMedium
CVSS5.5
Exploit probability—
ProductLinux Kernel
PublishedJun 25, 2026
First seenJun 25, 2026

How to fix

Update
  • linux linux_kernel6.18.36, 7.0.13 or later

Affected products

ProductAffected versionsFixed in
linux linux_kernel5.15 ≤ v < 6.18.36, 6.19 ≤ v < 7.0.13, 7.16.18.36, 7.0.13

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-53226 · Linux Kernel · Dark Radar