CVE-2026-72384
kernel: irqchip/ts4800: Fix missing chained handler cleanup on remove
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 15, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's irqchip/ts4800 driver. The driver fails to properly clear a chained interrupt handler when it is removed. This oversight leaves a dangling handler that could be invoked if the parent interrupt fires after the driver has been unloaded. Such an event could lead to the system attempting to access freed memory, resulting in a kernel crash and a Denial of Service (DoS).
Statement
This vulnerability is evaluated as Moderate impact because triggering the condition requires local administrative actions to unbind the driver, resulting in a system crash without compromising confidentiality or integrity. In Red Hat product deployments, the TS-4800 interrupt controller is designed for specific embedded architectures and is not built or enabled in supported kernel configurations. Consequently, standard Red Hat Enterprise Linux systems do not include this driver and are not affected.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-825 · Expired Pointer Dereference