CVE Database›Document archive›CVE-2026-63862

CVE-2026-63862

kernel: PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 19, 2026

Updated · August 7, 2026

Description

A flaw was found in the Linux kernel's MediaTek PCIe (Peripheral Component Interconnect Express) generation 3 driver. This vulnerability occurs because interrupt request (IRQ) domains are allocated before verifying the controller's IRQ. If the IRQ fetch fails, the allocated domains are not properly released, leading to a resource leak. An attacker could potentially exploit this to cause resource exhaustion, which may result in system instability or a denial of service.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-772 · Missing Release of Resource after Effective Lifetime