CVE-2026-53226

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A resource leak occurs in the rockchip GPIO driver during driver removal or teardown. The driver uses irq alloc domain generic chips() to allocate domain generic chips, but these are not automatically freed because the domain flags lack IRQ DOMAIN FLAG DESTROY GC. This results in a leak of the domain generic chips structure and associated generic chips. Furthermore, because these chips remain on the global gc list, they may be accessed by suspend, resume, or shutdown callbacks after the GPIO bank is removed, which can lead to a use-after-free condition and a kernel crash.

Recommendations Update the Linux kernel to a version where irq domain remove generic chips() is explicitly called within the rockchip gpio remove() function before the IRQ domain is removed.