OCTOBER 12, 2026
Live Feed
Back to database
Case File

CVE-2026-64462

UNKNOWN · CVSS N/A EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-07-25 · Last synced 2026-08-24

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's PCI subsystem, specifically related to the Altera PCIe driver, where resource leaks can occur if the probe process fails. This can lead to stale data pointers in the interrupt handler, potentially causing system instability or unexpected behavior due to enabled interrupts during a failed probe. Organizations utilizing Linux systems with Altera PCIe hardware should prioritize applying the fix to mitigate risks associated with this issue.

CVE
CVE-2026-64462
Severity
UNKNOWN
CVSS
N/A
EPSS
0.18%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: PCI: altera: Fix resource leaks on probe failure The chained IRQ handler is set during probe, but is only removed during the driver remove(). If pci_host_probe() fails, the handler and INTx IRQ domain remain set even though the devm-managed host bridge storage containing struct altera_pcie will be released, leaving the handler with a stale data pointer. Interrupts are also enabled before pci_host_probe() is called. If probe fails after that point, the controller interrupt source should be disabled before the chained handler and INTx domain are removed. So set the chained handler only after the INTx domain has been created. Disable controller interrupts during IRQ teardown, and tear the IRQ setup down if pci_host_probe() fails. [mani: commit log]