CVE-2026-64462
In the Linux kernel, the following vulnerability has been resolved:
PCI: altera: Fix resource leaks on probe failure
The chained IRQ handler is set during probe, but is only removed during the driver remove(). If pci_host_probe() fails, the handler and INTx IRQ domain remain set even though the devm-managed host bridge storage containing struct altera_pcie will be released, leaving the handler with a stale data pointer.
Interrupts are also enabled before pci_host_probe() is called. If probe fails after that point, the controller interrupt source should be disabled before the chained handler and INTx domain are removed.
Leer descripción completaMostrar menos
So set the chained handler only after the INTx domain has been created. Disable controller interrupts during IRQ teardown, and tear the IRQ setup down if pci_host_probe() fails.
[mani: commit log]
CVSS
NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.22%
- Percentil entre todas las CVEs puntuadas: 11
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
Referencias
- https://git.kernel.org/stable/c/09c43b7b7d29c6fadb27f32cdf7f3bb6598befa9
- https://git.kernel.org/stable/c/0db9aa9ec51be0a0ffdcdfd9af2b7bf3aeb7911a
- https://git.kernel.org/stable/c/6864c789b570e57f932847fa83f6b56917182d73
- https://git.kernel.org/stable/c/7a94138caeb27f3c49c1dbd93bf422098925bb28
- https://git.kernel.org/stable/c/99fc088d6cc6890ae35fa2f29c50ebe027844c20
- https://git.kernel.org/stable/c/9cf0cc481e1645ec65e61486ae41c486c59781cb
- https://git.kernel.org/stable/c/a25bfa2a6665a1d77324d4a609e7513b87680227
- https://git.kernel.org/stable/c/af7cf5d56d7d57c4fbfdb7b5b693790f331b07b7
JSON original (NVD)
Mostrar
{
"id": "CVE-2026-64462",
"cveTags": [],
"metrics": {},
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "c63aed7334c21de8d626ff028ccad98cf5847a0e",
"lessThan": "af7cf5d56d7d57c4fbfdb7b5b693790f331b07b7",
"versionType": "git"
},
{
"status": "affected",
"version": "c63aed7334c21de8d626ff028ccad98cf5847a0e",
"lessThan": "9cf0cc481e1645ec65e61486ae41c486c59781cb",
"versionType": "git"
},
{
"status": "affected",
"version": "c63aed7334c21de8d626ff028ccad98cf5847a0e",
"lessThan": "99fc088d6cc6890ae35fa2f29c50ebe027844c20",
"versionType": "git"
},
{
"status": "affected",
"version": "c63aed7334c21de8d626ff028ccad98cf5847a0e",
"lessThan": "a25bfa2a6665a1d77324d4a609e7513b87680227",
"versionType": "git"
},
{
"status": "affected",
"version": "c63aed7334c21de8d626ff028ccad98cf5847a0e",
"lessThan": "0db9aa9ec51be0a0ffdcdfd9af2b7bf3aeb7911a",
"versionType": "git"
},
{
"status": "affected",
"version": "c63aed7334c21de8d626ff028ccad98cf5847a0e",
"lessThan": "09c43b7b7d29c6fadb27f32cdf7f3bb6598befa9",
"versionType": "git"
},
{
"status": "affected",
"version": "c63aed7334c21de8d626ff028ccad98cf5847a0e",
"lessThan": "6864c789b570e57f932847fa83f6b56917182d73",
"versionType": "git"
},
{
"status": "affected",
"version": "c63aed7334c21de8d626ff028ccad98cf5847a0e",
"lessThan": "7a94138caeb27f3c49c1dbd93bf422098925bb28",
"versionType": "git"
}
],
"programFiles": [
"drivers/pci/controller/pcie-altera.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "5.9"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "5.9",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.10.261",
"versionType": "semver",
"lessThanOrEqual": "5.10.*"
},
{
"status": "unaffected",
"version": "5.15.212",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "6.1.178",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.145",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.97",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.18.39",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.1.4",
"versionType": "semver",
"lessThanOrEqual": "7.1.*"
},
{
"status": "unaffected",
"version": "7.2",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"drivers/pci/controller/pcie-altera.c"
],
"defaultStatus": "affected"
}
]
}
],
"published": "2026-07-25T10:17:31.420",
"references": [
{
"url": "https://git.kernel.org/stable/c/09c43b7b7d29c6fadb27f32cdf7f3bb6598befa9",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/0db9aa9ec51be0a0ffdcdfd9af2b7bf3aeb7911a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/6864c789b570e57f932847fa83f6b56917182d73",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/7a94138caeb27f3c49c1dbd93bf422098925bb28",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/99fc088d6cc6890ae35fa2f29c50ebe027844c20",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/9cf0cc481e1645ec65e61486ae41c486c59781cb",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/a25bfa2a6665a1d77324d4a609e7513b87680227",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/af7cf5d56d7d57c4fbfdb7b5b693790f331b07b7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
],
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: altera: Fix resource leaks on probe failure\n\nThe chained IRQ handler is set during probe, but is only removed during the\ndriver remove(). If pci_host_probe() fails, the handler and INTx IRQ\ndomain remain set even though the devm-managed host bridge storage\ncontaining struct altera_pcie will be released, leaving the handler with\na stale data pointer.\n\nInterrupts are also enabled before pci_host_probe() is called. If probe\nfails after that point, the controller interrupt source should be disabled\nbefore the chained handler and INTx domain are removed.\n\nSo set the chained handler only after the INTx domain has been created.\nDisable controller interrupts during IRQ teardown, and tear the IRQ setup\ndown if pci_host_probe() fails.\n\n[mani: commit log]"
}
],
"lastModified": "2026-08-17T05:17:51.473",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}