CVE-2026-92524
irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc()
Description
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc() When its_irq_gic_domain_alloc() fails, the following its_vpe_irq_domain_free() fails to invoke its_vep_teardown() for the corresponding interrupt, which leaks the resource. Invoke its_vpe_teardown() in the error handling path to avoid the leak. [ tglx: Massaged change log ]
INFO
Published Date :
Sept. 17, 2026, 5:17 p.m.
Last Modified :
Sept. 17, 2026, 5:17 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Solution
- Invoke its_vpe_teardown() in the error handling path.
- Ensure interrupt resources are properly freed.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-92524.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-92524 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-92524
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-92524 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-92524 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Sep. 17, 2026
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc() When its_irq_gic_domain_alloc() fails, the following its_vpe_irq_domain_free() fails to invoke its_vep_teardown() for the corresponding interrupt, which leaks the resource. Invoke its_vpe_teardown() in the error handling path to avoid the leak. [ tglx: Massaged change log ] Added Affected New affected value received. <a href="https://github.com/CVEProject/cvelistV5/blob/main/cves/2026/92xxx/CVE-2026-92524.json">CVE-2026-92524</a> Added Reference https://git.kernel.org/stable/c/05c199d6b806ed1cc64807062f9986f11315e8ab Added Reference https://git.kernel.org/stable/c/0d1951a1935a11c197272dbd38349033f0ef8991 Added Reference https://git.kernel.org/stable/c/325ff3e78c64cd619d52b99f7c8b09a3f31e1495 Added Reference https://git.kernel.org/stable/c/6cd7e9b5463e1bceddcaf4acec6ca0f12553455b Added Reference https://git.kernel.org/stable/c/6eb1f1414bf70185dad2525ecac5411db551faa2 Added Reference https://git.kernel.org/stable/c/82bccf7f9a12bf0eec9774968f6a853020ea26d3 Added Reference https://git.kernel.org/stable/c/c4643bcb3bdda96b7292d6ab6ed196755a5bc304 Added Reference https://git.kernel.org/stable/c/d324c4353f64190a032c78d6e07be6d57ddfb2f1