CVE-2026-63862

PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found

published July 19, 2026

CVSS
—
EPSS
0%
Percentile
11.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found

In mtk_pcie_setup_irq(), the IRQ domains are allocated before the

controller's IRQ is fetched. If the latter fails, the function

directly returns an error, without cleaning up the allocated domains.

Hence, reverse the order so that the IRQ domains are allocated after the

controller's IRQ is found.

This was flagged by Sashiko during a review of "[PATCH v6 0/7] PCI:

mediatek-gen3: add power control support".

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00215 · 11.2th percentile
Published
2026-07-19T14:04Z
EPSS history
Timeline
  • 19 JUL 14:04Z
    PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found
    cvelistv5