CVE-2026-89454
kernel: PCI: plda: Fix IRQ domain leaks in the error paths of plda_init_interrupts()
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 11, 2026
Updated · September 30, 2026
Description
A flaw was found in the Linux kernel's PCI PLDA driver. This vulnerability occurs in the plda_init_interrupts() function, where Interrupt Request (IRQ) domains are not properly deinitialized if certain initialization steps fail. A local attacker could potentially exploit this resource leak, leading to system instability or a Denial of Service (DoS) over time due to unreleased IRQ resources.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-772 · Missing Release of Resource after Effective Lifetime