In the Linux kernel, the following vulnerability has been resolved: irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove… (CVE-2026-63798)
A resource leak and improper cleanup of chained interrupt handlers in the Linux kernel irqchip/imgpdc driver could lead to use-after-free conditions and kernel crashes. The vulnerability arises because generic chips allocated during driver probe are not freed on removal, and chained handlers remain dangling. This can cause spurious interrupts to access freed memory. The issue has been fixed by adding a flag to automatically remove generic chips and clearing chained handlers on driver removal.
AI Analysis
Technical Summary
The Linux kernel irqchip/imgpdc driver improperly manages resources during driver removal. It allocates generic chips with irq_alloc_domain_generic_chips() and sets chained interrupt handlers with irq_set_chained_handler_and_data() during probe. However, on removal, it fails to free these generic chips and remove the chained handlers. As a result, generic chips remain on the global gc_list and may be accessed by suspend, resume, or shutdown callbacks after driver removal, causing use-after-free and potential kernel crashes. Additionally, dangling chained handlers can cause spurious interrupts to access freed memory. The fix involves setting the IRQ_DOMAIN_FLAG_DESTROY_GC flag to ensure automatic removal of generic chips and clearing chained handlers in the removal function.
Potential Impact
If exploited, this vulnerability can cause kernel crashes due to use-after-free conditions and spurious interrupts accessing freed memory. This may lead to system instability or denial of service. There is no indication of remote exploitability or privilege escalation from the provided data.
Mitigation Recommendations
A fix is available that sets the IRQ_DOMAIN_FLAG_DESTROY_GC flag to enable automatic cleanup of generic chips and clears chained interrupt handlers during driver removal. Users should update to a Linux kernel version that includes this fix. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor advisory or Linux kernel stable release notes for the official patch and remediation guidance.
In the Linux kernel, the following vulnerability has been resolved: irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove… (CVE-2026-63798)
Description
A resource leak and improper cleanup of chained interrupt handlers in the Linux kernel irqchip/imgpdc driver could lead to use-after-free conditions and kernel crashes. The vulnerability arises because generic chips allocated during driver probe are not freed on removal, and chained handlers remain dangling. This can cause spurious interrupts to access freed memory. The issue has been fixed by adding a flag to automatically remove generic chips and clearing chained handlers on driver removal.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel irqchip/imgpdc driver improperly manages resources during driver removal. It allocates generic chips with irq_alloc_domain_generic_chips() and sets chained interrupt handlers with irq_set_chained_handler_and_data() during probe. However, on removal, it fails to free these generic chips and remove the chained handlers. As a result, generic chips remain on the global gc_list and may be accessed by suspend, resume, or shutdown callbacks after driver removal, causing use-after-free and potential kernel crashes. Additionally, dangling chained handlers can cause spurious interrupts to access freed memory. The fix involves setting the IRQ_DOMAIN_FLAG_DESTROY_GC flag to ensure automatic removal of generic chips and clearing chained handlers in the removal function.
Potential Impact
If exploited, this vulnerability can cause kernel crashes due to use-after-free conditions and spurious interrupts accessing freed memory. This may lead to system instability or denial of service. There is no indication of remote exploitability or privilege escalation from the provided data.
Mitigation Recommendations
A fix is available that sets the IRQ_DOMAIN_FLAG_DESTROY_GC flag to enable automatic cleanup of generic chips and clears chained interrupt handlers during driver removal. Users should update to a Linux kernel version that includes this fix. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor advisory or Linux kernel stable release notes for the official patch and remediation guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-2332-q5fp-53mf
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-63798"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a5d27ad2a4a8d5989131f38
Added to database: 07/19/2026, 19:38:21 UTC
Last enriched: 07/19/2026, 20:22:27 UTC
Last updated: 07/20/2026, 10:41:07 UTC
Views: 11
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.