---
id: CVE-2026-64461
title: 'PCI: mediatek: Fix IRQ domain leak when port fails to enable'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  PCI: mediatek: Fix IRQ domain leak when port fails to enable

  When mtk_pcie_enable_port() fails, mtk_pcie_port_free() removes the port
  from pcie->ports and frees the po…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 <
    e23da72ef202654a7d5269885c4fa39a8404db76
  - >-
    Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 <
    ec7c05eed47d8b15c45380aee7ca168a82e15035
  - >-
    Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 <
    1fbe8972a39548a633d06d7b03a01b7b119a2c12
  - >-
    Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 <
    fe8c701a53c2816cd82301f66c671d952003c1b0
  - >-
    Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 <
    ce52e494a7555bdae1d990a2654fd7547ef6d986
  - >-
    Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 <
    6e6a529d6f779413379b4404c9ef6a36c0337225
  - >-
    Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 <
    df77314b3bedbd9ad5d6f0682f98b99e3c5f7e2e
  - >-
    Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 <
    f865a57896bd92d7662eb2818d8f48872e2cbbc7
  - Linux 4.14
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:39:04.662554Z'
published: '2026-07-25'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:44:52.835Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-64461'
references:
  - url: 'https://git.kernel.org/stable/c/e23da72ef202654a7d5269885c4fa39a8404db76'
  - url: 'https://git.kernel.org/stable/c/ec7c05eed47d8b15c45380aee7ca168a82e15035'
  - url: 'https://git.kernel.org/stable/c/1fbe8972a39548a633d06d7b03a01b7b119a2c12'
  - url: 'https://git.kernel.org/stable/c/fe8c701a53c2816cd82301f66c671d952003c1b0'
  - url: 'https://git.kernel.org/stable/c/ce52e494a7555bdae1d990a2654fd7547ef6d986'
  - url: 'https://git.kernel.org/stable/c/6e6a529d6f779413379b4404c9ef6a36c0337225'
  - url: 'https://git.kernel.org/stable/c/df77314b3bedbd9ad5d6f0682f98b99e3c5f7e2e'
  - url: 'https://git.kernel.org/stable/c/f865a57896bd92d7662eb2818d8f48872e2cbbc7'
tags:
  - cve.org
epss: 0.00184
epssPercentile: 0.08084
ingestedAt: '2026-11-06T16:57:43.172Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

PCI: mediatek: Fix IRQ domain leak when port fails to enable

When mtk_pcie_enable_port() fails, mtk_pcie_port_free() removes the port
from pcie->ports and frees the port structure. However, the IRQ domains set
up earlier by mtk_pcie_init_irq_domain() are never freed.

Fix this by refactoring mtk_pcie_irq_teardown() into a per-port helper,
mtk_pcie_irq_teardown_port(), and calling it from mtk_pcie_setup() when
mtk_pcie_enable_port() fails. Since the IRQ teardown must only happen in
the probe error path (during resume, child devices may have active MSI
mappings and the NOIRQ context prohibits sleeping locks),
mtk_pcie_enable_port() is changed to return an error code so callers can
distinguish the two paths and act accordingly.

This issue was reported by Sashiko while reviewing the EcoNet EN7528 SoC
support series.

## Affected

- `Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 < e23da72ef202654a7d5269885c4fa39a8404db76`
- `Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 < ec7c05eed47d8b15c45380aee7ca168a82e15035`
- `Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 < 1fbe8972a39548a633d06d7b03a01b7b119a2c12`
- `Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 < fe8c701a53c2816cd82301f66c671d952003c1b0`
- `Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 < ce52e494a7555bdae1d990a2654fd7547ef6d986`
- `Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 < 6e6a529d6f779413379b4404c9ef6a36c0337225`
- `Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 < df77314b3bedbd9ad5d6f0682f98b99e3c5f7e2e`
- `Linux >= b099631df160ec608cd6147f4d20a8042567a5b8 < f865a57896bd92d7662eb2818d8f48872e2cbbc7`
- `Linux 4.14`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.