Resource Leak Vulnerability in Rockchip GPIO Driver for Linux Kernel

CVE-2026-64241

What is CVE-2026-64241?

This vulnerability in the Rockchip GPIO driver for the Linux kernel involves several critical issues related to resource management during driver removal. Specifically, it addresses a debounce clock reference leak, where the debounce clock is not released correctly, leading to potential resource wastage. Additionally, an unregistered chained IRQ handler poses a risk of kernel panic if stray interrupts occur post-driver removal. Furthermore, there is an IRQ domain leak due to the failure to deallocate manually allocated IRQ domains and their associated generic chips. These issues highlight the importance of robust error handling and proper resource management in device drivers.

References