{"id":"CVE-2026-64461","title":"PCI: mediatek: Fix IRQ domain leak when port fails to enable","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: mediatek: Fix IRQ domain leak when port fails to enable\n\nWhen mtk_pcie_enable_port() fails, mtk_pcie_port_free() removes the port\nfrom pcie->ports and frees the po…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 < e23da72ef202654a7d5269885c4fa39a8404db76","Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 < ec7c05eed47d8b15c45380aee7ca168a82e15035","Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 < 1fbe8972a39548a633d06d7b03a01b7b119a2c12","Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 < fe8c701a53c2816cd82301f66c671d952003c1b0","Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 < ce52e494a7555bdae1d990a2654fd7547ef6d986","Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 < 6e6a529d6f779413379b4404c9ef6a36c0337225","Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 < df77314b3bedbd9ad5d6f0682f98b99e3c5f7e2e","Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 < f865a57896bd92d7662eb2818d8f48872e2cbbc7","Linux 4.14"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:39:04.662554Z"},"published":"2026-07-25","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:44:52.835Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-64461","references":[{"url":"https://git.kernel.org/stable/c/e23da72ef202654a7d5269885c4fa39a8404db76"},{"url":"https://git.kernel.org/stable/c/ec7c05eed47d8b15c45380aee7ca168a82e15035"},{"url":"https://git.kernel.org/stable/c/1fbe8972a39548a633d06d7b03a01b7b119a2c12"},{"url":"https://git.kernel.org/stable/c/fe8c701a53c2816cd82301f66c671d952003c1b0"},{"url":"https://git.kernel.org/stable/c/ce52e494a7555bdae1d990a2654fd7547ef6d986"},{"url":"https://git.kernel.org/stable/c/6e6a529d6f779413379b4404c9ef6a36c0337225"},{"url":"https://git.kernel.org/stable/c/df77314b3bedbd9ad5d6f0682f98b99e3c5f7e2e"},{"url":"https://git.kernel.org/stable/c/f865a57896bd92d7662eb2818d8f48872e2cbbc7"}],"tags":["cve.org"],"epss":0.00184,"epssPercentile":0.08084,"ingestedAt":"2026-11-06T16:57:43.172Z","slug":"CVE-2026-64461","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nPCI: mediatek: Fix IRQ domain leak when port fails to enable\n\nWhen mtk_pcie_enable_port() fails, mtk_pcie_port_free() removes the port\nfrom pcie->ports and frees the port structure. However, the IRQ domains set\nup earlier by mtk_pcie_init_irq_domain() are never freed.\n\nFix this by refactoring mtk_pcie_irq_teardown() into a per-port helper,\nmtk_pcie_irq_teardown_port(), and calling it from mtk_pcie_setup() when\nmtk_pcie_enable_port() fails. Since the IRQ teardown must only happen in\nthe probe error path (during resume, child devices may have active MSI\nmappings and the NOIRQ context prohibits sleeping locks),\nmtk_pcie_enable_port() is changed to return an error code so callers can\ndistinguish the two paths and act accordingly.\n\nThis issue was reported by Sashiko while reviewing the EcoNet EN7528 SoC\nsupport series.\n\n## Affected\n\n- `Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 < e23da72ef202654a7d5269885c4fa39a8404db76`\n- `Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 < ec7c05eed47d8b15c45380aee7ca168a82e15035`\n- `Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 < 1fbe8972a39548a633d06d7b03a01b7b119a2c12`\n- `Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 < fe8c701a53c2816cd82301f66c671d952003c1b0`\n- `Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 < ce52e494a7555bdae1d990a2654fd7547ef6d986`\n- `Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 < 6e6a529d6f779413379b4404c9ef6a36c0337225`\n- `Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 < df77314b3bedbd9ad5d6f0682f98b99e3c5f7e2e`\n- `Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 < f865a57896bd92d7662eb2818d8f48872e2cbbc7`\n- `Linux 4.14`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}