In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Fix IRQ domain leak when port fails to enable When… (CVE-2026-64461)
In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Fix IRQ domain leak when port fails to enable When mtk_pcie_enable_port() fails, mtk_pcie_port_free() removes the port from pcie->ports and frees the port structure. However, the IRQ domains set up earlier by mtk_pcie_init_irq_domain() are never freed. Fix this by refactoring mtk_pcie_irq_teardown() into a per-port helper, mtk_pcie_irq_teardown_port(), and calling it from mtk_pcie_setup() when mtk_pcie_enable_port() fails. Since the IRQ teardown must only happen in the probe error path (during resume, child devices may have active MSI mappings and the NOIRQ context prohibits sleeping locks), mtk_pcie_enable_port() is changed to return an error code so callers can distinguish the two paths and act accordingly. This issue was reported by Sashiko while reviewing the EcoNet EN7528 SoC support series.
AI Analysis
Technical Summary
The Linux kernel Mediatek PCI driver had a resource leak vulnerability (CVE-2026-64461) where IRQ domains allocated during PCI port initialization were not freed if mtk_pcie_enable_port() failed. The cleanup function mtk_pcie_irq_teardown() was refactored into a per-port helper and called appropriately on failure to free IRQ domains. This fix prevents IRQ domain leaks by ensuring proper teardown during error handling in the PCI port enable process.
Potential Impact
The vulnerability results in a resource leak of IRQ domains when a PCI port fails to enable. While this does not directly lead to code execution or privilege escalation, it can cause resource exhaustion or instability in systems using the affected Mediatek PCI driver. No known exploits are reported in the wild.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this issue by properly freeing IRQ domains on failure of port enabling. Users should update to a Linux kernel version that includes this fix. Since this is a kernel-level resource management fix, applying the official kernel patch or upgrading to a fixed kernel version is the recommended remediation.
In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Fix IRQ domain leak when port fails to enable When… (CVE-2026-64461)
Description
In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Fix IRQ domain leak when port fails to enable When mtk_pcie_enable_port() fails, mtk_pcie_port_free() removes the port from pcie->ports and frees the port structure. However, the IRQ domains set up earlier by mtk_pcie_init_irq_domain() are never freed. Fix this by refactoring mtk_pcie_irq_teardown() into a per-port helper, mtk_pcie_irq_teardown_port(), and calling it from mtk_pcie_setup() when mtk_pcie_enable_port() fails. Since the IRQ teardown must only happen in the probe error path (during resume, child devices may have active MSI mappings and the NOIRQ context prohibits sleeping locks), mtk_pcie_enable_port() is changed to return an error code so callers can distinguish the two paths and act accordingly. This issue was reported by Sashiko while reviewing the EcoNet EN7528 SoC support series.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel Mediatek PCI driver had a resource leak vulnerability (CVE-2026-64461) where IRQ domains allocated during PCI port initialization were not freed if mtk_pcie_enable_port() failed. The cleanup function mtk_pcie_irq_teardown() was refactored into a per-port helper and called appropriately on failure to free IRQ domains. This fix prevents IRQ domain leaks by ensuring proper teardown during error handling in the PCI port enable process.
Potential Impact
The vulnerability results in a resource leak of IRQ domains when a PCI port fails to enable. While this does not directly lead to code execution or privilege escalation, it can cause resource exhaustion or instability in systems using the affected Mediatek PCI driver. No known exploits are reported in the wild.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this issue by properly freeing IRQ domains on failure of port enabling. Users should update to a Linux kernel version that includes this fix. Since this is a kernel-level resource management fix, applying the official kernel patch or upgrading to a fixed kernel version is the recommended remediation.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-7rvv-9qxr-rh4x
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64461"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a6542089c2644c7f8082fd2
Added to database: 07/25/2026, 23:08:56 UTC
Last enriched: 07/25/2026, 23:21:03 UTC
Last updated: 09/07/2026, 22:52:14 UTC
Views: 53
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.