CVE-2026-64462
Received Received - Intake

Altera PCIe Driver Resource Leak Fix

Publication date: 2026-07-25

Last updated on: 2026-07-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: PCI: altera: Fix resource leaks on probe failure The chained IRQ handler is set during probe, but is only removed during the driver remove(). If pci_host_probe() fails, the handler and INTx IRQ domain remain set even though the devm-managed host bridge storage containing struct altera_pcie will be released, leaving the handler with a stale data pointer. Interrupts are also enabled before pci_host_probe() is called. If probe fails after that point, the controller interrupt source should be disabled before the chained handler and INTx domain are removed. So set the chained handler only after the INTx domain has been created. Disable controller interrupts during IRQ teardown, and tear the IRQ setup down if pci_host_probe() fails. [mani: commit log]

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-25
Last Modified
2026-07-25
Generated
2026-07-25
AI Q&A
2026-07-25
EPSS Evaluated
N/A
NVD
CVE-2026-64462
EUVD
EUVD-2026-48806

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
altera linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a resource leak in the PCI altera driver. During probe, a chained IRQ handler is set but only removed during driver removal. If probe fails, the handler and INTx IRQ domain remain set while the host bridge storage is released, causing a stale data pointer in the handler.

Detection Guidance

This vulnerability is specific to the Linux kernel's PCI subsystem and may not have direct network detection methods. Check kernel logs for probe failures or resource leaks related to the altera PCI driver using dmesg | grep altera or journalctl -k | grep altera.

Impact Analysis

This vulnerability could lead to system instability or crashes if probe failures occur, as stale IRQ handlers may cause incorrect interrupt handling. It may also result in resource exhaustion or unexpected behavior in systems using the altera PCI driver.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for CVE-2026-64462. If immediate patching is not possible, monitor systems for PCI probe failures and ensure proper cleanup of IRQ handlers.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64462. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart