In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Fix IRQ domain leak when port fails to enable When… (CVE-2026-64461)
A vulnerability in the Linux kernel's Mediatek PCI driver caused an IRQ domain leak when enabling a PCI port failed. The issue occurred because the IRQ domains allocated during initialization were not freed if the port enabling function failed, potentially leading to resource leaks. This was fixed by refactoring the IRQ teardown process to properly clean up resources on failure paths. The fix ensures that IRQ domains are freed when port enabling fails, preventing resource leakage.
AI Analysis
Technical Summary
The Linux kernel Mediatek PCI driver had a resource leak vulnerability (CVE-2026-64461) where IRQ domains allocated during PCI port initialization were not freed if mtk_pcie_enable_port() failed. The cleanup function mtk_pcie_irq_teardown() was refactored into a per-port helper and called appropriately on failure to free IRQ domains. This fix prevents IRQ domain leaks by ensuring proper teardown during error handling in the PCI port enable process.
Potential Impact
The vulnerability results in a resource leak of IRQ domains when a PCI port fails to enable. While this does not directly lead to code execution or privilege escalation, it can cause resource exhaustion or instability in systems using the affected Mediatek PCI driver. No known exploits are reported in the wild.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this issue by properly freeing IRQ domains on failure of port enabling. Users should update to a Linux kernel version that includes this fix. Since this is a kernel-level resource management fix, applying the official kernel patch or upgrading to a fixed kernel version is the recommended remediation.
In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Fix IRQ domain leak when port fails to enable When… (CVE-2026-64461)
Description
A vulnerability in the Linux kernel's Mediatek PCI driver caused an IRQ domain leak when enabling a PCI port failed. The issue occurred because the IRQ domains allocated during initialization were not freed if the port enabling function failed, potentially leading to resource leaks. This was fixed by refactoring the IRQ teardown process to properly clean up resources on failure paths. The fix ensures that IRQ domains are freed when port enabling fails, preventing resource leakage.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel Mediatek PCI driver had a resource leak vulnerability (CVE-2026-64461) where IRQ domains allocated during PCI port initialization were not freed if mtk_pcie_enable_port() failed. The cleanup function mtk_pcie_irq_teardown() was refactored into a per-port helper and called appropriately on failure to free IRQ domains. This fix prevents IRQ domain leaks by ensuring proper teardown during error handling in the PCI port enable process.
Potential Impact
The vulnerability results in a resource leak of IRQ domains when a PCI port fails to enable. While this does not directly lead to code execution or privilege escalation, it can cause resource exhaustion or instability in systems using the affected Mediatek PCI driver. No known exploits are reported in the wild.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this issue by properly freeing IRQ domains on failure of port enabling. Users should update to a Linux kernel version that includes this fix. Since this is a kernel-level resource management fix, applying the official kernel patch or upgrading to a fixed kernel version is the recommended remediation.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-7rvv-9qxr-rh4x
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64461"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a6542089c2644c7f8082fd2
Added to database: 07/25/2026, 23:08:56 UTC
Last enriched: 07/25/2026, 23:21:03 UTC
Last updated: 07/26/2026, 05:10:56 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.