CVE-2026-46060

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the crypto: qat component where IRQ handlers are not properly detached when adf dev up() partially completes and then fails. Because the device is enabled with pcim enable device(), the pci alloc irq vectors() function registers pcim msi release() as a devres action. Upon probe failure, pcim msi release() triggers pci free irq vectors(), which tears down MSI-X vectors while IRQ handlers, such as qat0-bundle0, remain attached. This sequence leads to remove proc entry() warnings and leaks in the irq directory.

Recommendations Explicitly call the adf dev down() function when adf dev up() fails to ensure IRQ handlers are freed before devres releases the MSI-X vectors.