In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found In… (CVE-2026-63862)
A vulnerability in the Linux kernel's PCI mediatek-gen3 driver could lead to leaking IRQ domains when the IRQ is not found. The issue occurs because IRQ domains are allocated before confirming the controller's IRQ, and if fetching the IRQ fails, the allocated domains are not cleaned up. This has been fixed by changing the order of operations to allocate IRQ domains only after successfully finding the controller's IRQ.
AI Analysis
Technical Summary
The Linux kernel's mtk_pcie_setup_irq() function in the mediatek-gen3 PCI driver improperly allocates IRQ domains before verifying the controller's IRQ. If the IRQ fetch fails, the function returns an error without freeing the allocated IRQ domains, causing a resource leak. The fix involves reversing the order so that IRQ domains are allocated only after the controller's IRQ is successfully obtained. This vulnerability was identified during a code review and has been resolved.
Potential Impact
The vulnerability causes leaking of IRQ domains in the kernel when the IRQ is not found, which could lead to resource exhaustion or instability in the affected system. There is no indication of direct code execution or privilege escalation from the provided data.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this issue by changing the order of IRQ domain allocation. Users should update to the fixed kernel version once available. Patch status is not explicitly confirmed in the provided data; check the vendor or Linux kernel advisory for the current remediation status.
In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found In… (CVE-2026-63862)
Description
A vulnerability in the Linux kernel's PCI mediatek-gen3 driver could lead to leaking IRQ domains when the IRQ is not found. The issue occurs because IRQ domains are allocated before confirming the controller's IRQ, and if fetching the IRQ fails, the allocated domains are not cleaned up. This has been fixed by changing the order of operations to allocate IRQ domains only after successfully finding the controller's IRQ.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel's mtk_pcie_setup_irq() function in the mediatek-gen3 PCI driver improperly allocates IRQ domains before verifying the controller's IRQ. If the IRQ fetch fails, the function returns an error without freeing the allocated IRQ domains, causing a resource leak. The fix involves reversing the order so that IRQ domains are allocated only after the controller's IRQ is successfully obtained. This vulnerability was identified during a code review and has been resolved.
Potential Impact
The vulnerability causes leaking of IRQ domains in the kernel when the IRQ is not found, which could lead to resource exhaustion or instability in the affected system. There is no indication of direct code execution or privilege escalation from the provided data.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this issue by changing the order of IRQ domain allocation. Users should update to the fixed kernel version once available. Patch status is not explicitly confirmed in the provided data; check the vendor or Linux kernel advisory for the current remediation status.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-x3mw-3vxw-g4f9
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-63862"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a5d27ac2a4a8d5989130645
Added to database: 07/19/2026, 19:38:20 UTC
Last enriched: 07/19/2026, 20:14:48 UTC
Last updated: 07/20/2026, 17:26:47 UTC
Views: 13
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.