CVE-2026-64461 - Vulnerability Details

- PCI: mediatek: Fix IRQ domain leak when port fails to enable

Description

In the Linux kernel, the following vulnerability has been resolved:

PCI: mediatek: Fix IRQ domain leak when port fails to enable

When mtk_pcie_enable_port() fails, mtk_pcie_port_free() removes the port
from pcie->ports and frees the port structure. However, the IRQ domains set
up earlier by mtk_pcie_init_irq_domain() are never freed.

Fix this by refactoring mtk_pcie_irq_teardown() into a per-port helper,
mtk_pcie_irq_teardown_port(), and calling it from mtk_pcie_setup() when
mtk_pcie_enable_port() fails. Since the IRQ teardown must only happen in
the probe error path (during resume, child devices may have active MSI
mappings and the NOIRQ context prohibits sleeping locks),
mtk_pcie_enable_port() is changed to return an error code so callers can
distinguish the two paths and act accordingly.

This issue was reported by Sashiko while reviewing the EcoNet EN7528 SoC
support series.

Published: 2026-07-25

Score: n/a

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`b099631df160ec608cd6147f4d20a8042567a5b8`	affected	< e23da72ef202654a7d5269885c4fa39a8404db76
`b099631df160ec608cd6147f4d20a8042567a5b8`	affected	< ec7c05eed47d8b15c45380aee7ca168a82e15035
`b099631df160ec608cd6147f4d20a8042567a5b8`	affected	< 1fbe8972a39548a633d06d7b03a01b7b119a2c12
`b099631df160ec608cd6147f4d20a8042567a5b8`	affected	< fe8c701a53c2816cd82301f66c671d952003c1b0
`b099631df160ec608cd6147f4d20a8042567a5b8`	affected	< ce52e494a7555bdae1d990a2654fd7547ef6d986
`b099631df160ec608cd6147f4d20a8042567a5b8`	affected	< 6e6a529d6f779413379b4404c9ef6a36c0337225
`b099631df160ec608cd6147f4d20a8042567a5b8`	affected	< df77314b3bedbd9ad5d6f0682f98b99e3c5f7e2e
`b099631df160ec608cd6147f4d20a8042567a5b8`	affected	< f865a57896bd92d7662eb2818d8f48872e2cbbc7

Linux

affected

Version	Status	Constraints
`4.14`	affected	—
`0`	unaffected	< 4.14
`5.10.261`	unaffected	≤ 5.10.*
`5.15.212`	unaffected	≤ 5.15.*
`6.1.178`	unaffected	≤ 6.1.*
`6.6.145`	unaffected	≤ 6.6.*
`6.12.97`	unaffected	≤ 6.12.*
`6.18.39`	unaffected	≤ 6.18.*
`7.1.4`	unaffected	≤ 7.1.*
`7.2-rc1`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[b099631df160ec608cd6147f4d20a8042567a5b8,e23da72ef202654a7d5269885c4fa39a8404db76)`	affected	code_commit	—
`[b099631df160ec608cd6147f4d20a8042567a5b8,ec7c05eed47d8b15c45380aee7ca168a82e15035)`	affected	code_commit	—
`[b099631df160ec608cd6147f4d20a8042567a5b8,1fbe8972a39548a633d06d7b03a01b7b119a2c12)`	affected	code_commit	—
`[b099631df160ec608cd6147f4d20a8042567a5b8,fe8c701a53c2816cd82301f66c671d952003c1b0)`	affected	code_commit	—
`[b099631df160ec608cd6147f4d20a8042567a5b8,ce52e494a7555bdae1d990a2654fd7547ef6d986)`	affected	code_commit	—
`[b099631df160ec608cd6147f4d20a8042567a5b8,6e6a529d6f779413379b4404c9ef6a36c0337225)`	affected	code_commit	—
`[b099631df160ec608cd6147f4d20a8042567a5b8,df77314b3bedbd9ad5d6f0682f98b99e3c5f7e2e)`	affected	code_commit	—
`[b099631df160ec608cd6147f4d20a8042567a5b8,f865a57896bd92d7662eb2818d8f48872e2cbbc7)`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`4.14`	affected	semver	—
`[0,4.14)`	unaffected	semver	—
`[5.10.261,5.11.0)`	unaffected	semver	—
`[5.15.212,5.16.0)`	unaffected	semver	—
`[6.1.178,6.2.0)`	unaffected	semver	—
`[6.6.145,6.7.0)`	unaffected	semver	—
`[6.12.97,6.13.0)`	unaffected	semver	—
`[6.18.39,6.19.0)`	unaffected	semver	—
`[7.1.4,7.2.0)`	unaffected	semver	—
`[7.2-rc1,*]`	unaffected	semver	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00184.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/1fbe8972a39548a633d06d7b03a01b7b119a2c12
https://git.kernel.org/stable/c/6e6a529d6f779413379b4404c9ef6a36c0337225
https://git.kernel.org/stable/c/ce52e494a7555bdae1d990a2654fd7547ef6d986
https://git.kernel.org/stable/c/df77314b3bedbd9ad5d6f0682f98b99e3c5f7e2e
https://git.kernel.org/stable/c/e23da72ef202654a7d5269885c4fa39a8404db76
https://git.kernel.org/stable/c/ec7c05eed47d8b15c45380aee7ca168a82e15035
https://git.kernel.org/stable/c/f865a57896bd92d7662eb2818d8f48872e2cbbc7
https://git.kernel.org/stable/c/fe8c701a53c2816cd82301f66c671d952003c1b0
https://lore.kernel.org/linux-cve-announce/2026072543-CVE-2026-64461-20f5@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2026-64461
https://www.cve.org/CVERecord?id=CVE-2026-64461

History

Thu, 30 Jul 2026 00:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-772
References		https://lore.kernel.org/linux-cve-announce/2026072543-CVE-2026-64461-20f5@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-64461 https://www.cve.org/CVERecord?id=CVE-2026-64461

Mon, 27 Jul 2026 05:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-788

Sat, 25 Jul 2026 09:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Fix IRQ domain leak when port fails to enable When mtk_pcie_enable_port() fails, mtk_pcie_port_free() removes the port from pcie->ports and frees the port structure. However, the IRQ domains set up earlier by mtk_pcie_init_irq_domain() are never freed. Fix this by refactoring mtk_pcie_irq_teardown() into a per-port helper, mtk_pcie_irq_teardown_port(), and calling it from mtk_pcie_setup() when mtk_pcie_enable_port() fails. Since the IRQ teardown must only happen in the probe error path (during resume, child devices may have active MSI mappings and the NOIRQ context prohibits sleeping locks), mtk_pcie_enable_port() is changed to return an error code so callers can distinguish the two paths and act accordingly. This issue was reported by Sashiko while reviewing the EcoNet EN7528 SoC support series.
Title		PCI: mediatek: Fix IRQ domain leak when port fails to enable
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/1fbe8972a39548a633d06d7b03a01b7b119a2c12 https://git.kernel.org/stable/c/6e6a529d6f779413379b4404c9ef6a36c0337225 https://git.kernel.org/stable/c/ce52e494a7555bdae1d990a2654fd7547ef6d986 https://git.kernel.org/stable/c/df77314b3bedbd9ad5d6f0682f98b99e3c5f7e2e https://git.kernel.org/stable/c/e23da72ef202654a7d5269885c4fa39a8404db76 https://git.kernel.org/stable/c/ec7c05eed47d8b15c45380aee7ca168a82e15035 https://git.kernel.org/stable/c/f865a57896bd92d7662eb2818d8f48872e2cbbc7 https://git.kernel.org/stable/c/fe8c701a53c2816cd82301f66c671d952003c1b0

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-07-25T08:51:28.309Z

Updated: 2026-07-25T08:51:28.309Z

Reserved: 2026-07-19T15:36:31.789Z

Link: CVE-2026-64461

Vulnrichment

No data.

NVD

No data.

Redhat

Severity :

Publid Date: 2026-07-25T00:00:00Z

Links: CVE-2026-64461 - Bugzilla

OpenCVE Enrichment

Updated: 2026-07-27T05:15:06Z

Weaknesses

Tracking

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object