CVE-2026-64241

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-64241", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-19T15:36:31.772Z", "datePublished": "2026-07-24T15:27:44.144Z", "dateUpdated": "2026-10-21T12:43:12.330Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-21T12:43:12.330Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: rockchip: teardown bugs and resource leaks\n\nAddress several teardown issues and resource leaks in the driver's remove\npath and error handling:\n\n1. Debounce clock reference leak: The debounce clock (bank->db_clk) is\n obtained using of_clk_get() which increments the clock's reference\n count, but clk_put() is never called. Register a devm action to\n cleanly release it on unbind. Note that of_clk_get(..., 1) remains\n necessary over devm_clk_get() because the DT binding does not define\n clock-names, precluding name-based lookup.\n\n2. Unregistered chained IRQ handler: The chained IRQ handler is not\n disconnected in remove(). If a stray interrupt fires after the driver\n is removed, the kernel attempts to execute a stale handler, leading\n to a panic. Fix this by clearing the handler in remove().\n\n3. IRQ domain leak: The linear IRQ domain and its generic chips are\n allocated manually during probe but never removed. Remove the IRQ\n domain during driver teardown to free the associated generic chips\n and mappings.\n\n[Bartosz: don't emit an error message on devres allocation failure]"}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpio/gpio-rockchip.c"], "versions": [{"version": "936ee2675eee1faca0dcdfa79165c7990422e0fc", "lessThan": "77b6ff33c8f5642f7e7c1ca691857218683264fd", "status": "affected", "versionType": "git"}, {"version": "936ee2675eee1faca0dcdfa79165c7990422e0fc", "lessThan": "cdc603ce3118232712ba443dd8b414d8f25ca467", "status": "affected", "versionType": "git"}, {"version": "936ee2675eee1faca0dcdfa79165c7990422e0fc", "lessThan": "7f945f7f10f442270518dfd768d230227c495fcf", "status": "affected", "versionType": "git"}, {"version": "936ee2675eee1faca0dcdfa79165c7990422e0fc", "lessThan": "6be81e77e1748665d7ddab9128ff1d35eb75b87d", "status": "affected", "versionType": "git"}, {"version": "936ee2675eee1faca0dcdfa79165c7990422e0fc", "lessThan": "9500077678230e36d22bf16d2b9539c13e59a801", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpio/gpio-rockchip.c"], "versions": [{"version": "5.15", "status": "affected"}, {"version": "0", "lessThan": "5.15", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.160", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.96", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.35", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.12", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15", "versionEndExcluding": "6.6.160"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15", "versionEndExcluding": "6.12.96"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15", "versionEndExcluding": "6.18.35"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15", "versionEndExcluding": "7.0.12"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15", "versionEndExcluding": "7.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/77b6ff33c8f5642f7e7c1ca691857218683264fd"}, {"url": "https://git.kernel.org/stable/c/cdc603ce3118232712ba443dd8b414d8f25ca467"}, {"url": "https://git.kernel.org/stable/c/7f945f7f10f442270518dfd768d230227c495fcf"}, {"url": "https://git.kernel.org/stable/c/6be81e77e1748665d7ddab9128ff1d35eb75b87d"}, {"url": "https://git.kernel.org/stable/c/9500077678230e36d22bf16d2b9539c13e59a801"}], "title": "gpio: rockchip: teardown bugs and resource leaks", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/gpio/gpio-rockchip.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "77b6ff33c8f5642f7e7c1ca691857218683264fd", "status": "affected", "version": "936ee2675eee1faca0dcdfa79165c7990422e0fc", "versionType": "git"}, {"lessThan": "cdc603ce3118232712ba443dd8b414d8f25ca467", "status": "affected", "version": "936ee2675eee1faca0dcdfa79165c7990422e0fc", "versionType": "git"}, {"lessThan": "7f945f7f10f442270518dfd768d230227c495fcf", "status": "affected", "version": "936ee2675eee1faca0dcdfa79165c7990422e0fc", "versionType": "git"}, {"lessThan": "6be81e77e1748665d7ddab9128ff1d35eb75b87d", "status": "affected", "version": "936ee2675eee1faca0dcdfa79165c7990422e0fc", "versionType": "git"}, {"lessThan": "9500077678230e36d22bf16d2b9539c13e59a801", "status": "affected", "version": "936ee2675eee1faca0dcdfa79165c7990422e0fc", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/gpio/gpio-rockchip.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.15"}, {"lessThan": "5.15", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.160", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.96", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.35", "versionType": "semver"}, {"lessThanOrEqual": "7.0.*", "status": "unaffected", "version": "7.0.12", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "5E43E3CF-BCD1-4C3F-B23D-AF6EAE0FA079", "versionEndExcluding": "6.12.96", "versionStartIncluding": "5.15", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "0FCCB23A-7629-4386-93B6-B119237C4382", "versionEndExcluding": "6.18.35", "versionStartIncluding": "6.13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "9161A938-0FA8-44BC-95FE-C5A271601AB3", "versionEndExcluding": "7.0.12", "versionStartIncluding": "6.19", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*", "matchCriteriaId": "B1EF7059-E670-45F4-B422-54C40FA86390", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*", "matchCriteriaId": "0D38F0BF-A728-4133-A358-D44A2F7EE6D6", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*", "matchCriteriaId": "EC732D08-5F7B-46D9-B154-E60C7F4F0A97", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:*", "matchCriteriaId": "E5910A9D-F60A-409A-B486-FE66BFEBA9B9", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc5:*:*:*:*:*:*", "matchCriteriaId": "81DFF19E-9CF8-49C6-8C36-1E4038622933", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: rockchip: teardown bugs and resource leaks\n\nAddress several teardown issues and resource leaks in the driver's remove\npath and error handling:\n\n1. Debounce clock reference leak: The debounce clock (bank->db_clk) is\n obtained using of_clk_get() which increments the clock's reference\n count, but clk_put() is never called. Register a devm action to\n cleanly release it on unbind. Note that of_clk_get(..., 1) remains\n necessary over devm_clk_get() because the DT binding does not define\n clock-names, precluding name-based lookup.\n\n2. Unregistered chained IRQ handler: The chained IRQ handler is not\n disconnected in remove(). If a stray interrupt fires after the driver\n is removed, the kernel attempts to execute a stale handler, leading\n to a panic. Fix this by clearing the handler in remove().\n\n3. IRQ domain leak: The linear IRQ domain and its generic chips are\n allocated manually during probe but never removed. Remove the IRQ\n domain during driver teardown to free the associated generic chips\n and mappings.\n\n[Bartosz: don't emit an error message on devres allocation failure]"}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ngpio: rockchip: errores de desmontaje y fugas de recursos\n\nAborda varios problemas de desmontaje y fugas de recursos en la ruta de eliminaci\u00f3n del controlador y el manejo de errores:\n\n1. Fuga de referencia del reloj de antirrebote: El reloj de antirrebote (bank -> db_clk) se obtiene usando of_clk_get() lo que incrementa el contador de referencias del reloj, pero clk_put() nunca se llama. Registra una acci\u00f3n devm para liberarlo limpiamente al desvincular. Tenga en cuenta que of_clk_get(..., 1) sigue siendo necesario en lugar de devm_clk_get() porque el enlace DT no define nombres de reloj, lo que impide la b\u00fasqueda basada en nombres.\n\n2. Gestor IRQ encadenado no registrado: El gestor IRQ encadenado no se desconecta en remove(). Si una interrupci\u00f3n errante se dispara despu\u00e9s de que se elimina el controlador, el kernel intenta ejecutar un gestor obsoleto, lo que lleva a un p\u00e1nico. Solucione esto limpiando el gestor en remove().\n\n3. Fuga de dominio IRQ: El dominio IRQ lineal y sus chips gen\u00e9ricos se asignan manualmente durante la sonda pero nunca se eliminan. Elimine el dominio IRQ durante el desmontaje del controlador para liberar los chips gen\u00e9ricos y las asignaciones asociados.\n\n[Bartosz: no emita un mensaje de error en caso de fallo de asignaci\u00f3n de devres]"}], "id": "CVE-2026-64241", "lastModified": "2026-11-08T16:10:00.183", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2026-07-24T16:16:53.443", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/6be81e77e1748665d7ddab9128ff1d35eb75b87d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/77b6ff33c8f5642f7e7c1ca691857218683264fd"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/7f945f7f10f442270518dfd768d230227c495fcf"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/9500077678230e36d22bf16d2b9539c13e59a801"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/cdc603ce3118232712ba443dd8b414d8f25ca467"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-401"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: gpio: rockchip: teardown bugs and resource leaks", "id": "2506789", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2506789"}, "csaw": false, "cwe": "CWE-772", "details": ["No description is available for this CVE."], "name": "CVE-2026-64241", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-07-24T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-64241\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-64241\nhttps://lore.kernel.org/linux-cve-announce/2026072441-CVE-2026-64241-e258@gregkh/T"]}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[936ee2675eee1faca0dcdfa79165c7990422e0fc,cdc603ce3118232712ba443dd8b414d8f25ca467)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[936ee2675eee1faca0dcdfa79165c7990422e0fc,7f945f7f10f442270518dfd768d230227c495fcf)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[936ee2675eee1faca0dcdfa79165c7990422e0fc,6be81e77e1748665d7ddab9128ff1d35eb75b87d)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[936ee2675eee1faca0dcdfa79165c7990422e0fc,9500077678230e36d22bf16d2b9539c13e59a801)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "5.15"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,5.15)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.96,6.13.0]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.35,6.19.0]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.0.12,7.1.0]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-07-24T21:45:02.737190+00:00", "updated": "2026-08-13T20:00:03.448447+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}