CVE-2026-63862
kernel: PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 19, 2026
Updated · August 7, 2026
Description
A flaw was found in the Linux kernel's MediaTek PCIe (Peripheral Component Interconnect Express) generation 3 driver. This vulnerability occurs because interrupt request (IRQ) domains are allocated before verifying the controller's IRQ. If the IRQ fetch fails, the allocated domains are not properly released, leading to a resource leak. An attacker could potentially exploit this to cause resource exhaustion, which may result in system instability or a denial of service.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-772 · Missing Release of Resource after Effective Lifetime