CVE-2026-53226

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

gpio: rockchip: fix generic IRQ chip leak on remove

The driver allocates domain generic chips using

irq_alloc_domain_generic_chips() during probe. However, on driver

remove/teardown, the generic chips are not automatically freed when the

IRQ domain is removed because the domain flags do not include

IRQ_DOMAIN_FLAG_DESTROY_GC.

This causes both the domain generic chips structure and the associated

generic chips to be leaked. Additionally, the generic chips remain on

the global gc_list and may later be visited by generic IRQ chip suspend,

resume, or shutdown callbacks after the GPIO bank has been removed,

potentially resulting in a use-after-free and kernel crash.

Fix the resource leak by explicitly calling

irq_domain_remove_generic_chips() before removing the IRQ domain in

rockchip_gpio_remove().

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References