CVE-2026-72153

A flaw was found in the Linux kernel's irqchip/crossbar component. The crossbar_domain_free() function incorrectly uses a nulled-out hardware interrupt (hwirq) member as an index when attempting to free domain data. This can lead to an out-of-bounds write when resetting an interrupt mapping entry or writing to a crossbar register. A local attacker could potentially exploit this vulnerability to cause memory corruption or a denial of service (DoS).

This vulnerability is evaluated as Moderate severity because exploitation requires local privileges and is restricted to systems utilizing specialized interrupt router hardware, limiting the potential blast radius. The affected crossbar interrupt controller driver is intended for specific embedded system-on-chip architectures and is not compiled into supported Red Hat Enterprise Linux kernels. Consequently, default Red Hat enterprise installations are not affected by this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.