CVE-2026-89454

Received Received - Intake

Memory Leak in Linux Kernel PCI PLDA Driver

Publication date: 2026-09-11

Last updated on: 2026-09-11

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: PCI: plda: Fix IRQ domain leaks in the error paths of plda_init_interrupts() plda_init_interrupts() initializes IRQ domains and creates IRQ mapping but does not unwind them when later step fails. If platform_get_irq() or either irq_create_mapping() fails in plda_init_interrupts(), the domains are never deinitialized. If irq_create_mapping() fails, port->intx_irq stays initialized. Hence, remove the IRQ domains in the error path by calling plda_pcie_irq_domain_deinit(). Since plda_pcie_irq_domain_deinit() now disposes of the intx_irq and msi_irq mappings itself before removing their domains, the msi_irq mapping failure path can go directly to err_irq_domain_deinit instead of disposing of port->intx_irq separately first. This issue was found by automated review of sashiko-bot [mani: commit log]

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-11

Last Modified

2026-09-11

Generated

2026-09-12

AI Q&A

2026-09-12

EPSS Evaluated

N/A

NVD

CVE-2026-89454

EUVD

EUVD-2026-76360

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves improper cleanup of IRQ domains during error paths in the plda_init_interrupts() function. When platform_get_irq() or irq_create_mapping() fails, the function does not deinitialize the IRQ domains, leaving them allocated and causing potential resource leaks.

Detection Guidance

This vulnerability is specific to the Linux kernel's PCI subsystem and involves IRQ domain leaks during initialization failures. Detection requires checking kernel logs for PCI-related errors or IRQ domain issues during system boot or driver initialization. Commands like dmesg | grep -i pci or journalctl -k | grep -i pci may help identify related errors.

Impact Analysis

This vulnerability could lead to resource exhaustion, system instability, or crashes due to unmanaged IRQ domain allocations. It may affect systems using the Linux kernel with the affected PCI driver, potentially causing performance degradation or unexpected behavior.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for this issue. Monitor kernel logs for PCI initialization errors after applying updates. If you cannot update immediately, avoid using affected PCI devices until patched.

Hi! I’m here to help you understand CVE-2026-89454. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70