CVE-2026-63798

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A resource leak exists in the imgpdc driver. The driver uses irq alloc domain generic chips() to allocate domain generic chips and irq set chained handler and data() to set up chained handlers during the probe process. However, these resources are not properly freed or removed when the driver is removed. This causes generic chips to remain on the global gc list, which can be accessed by suspend, resume, or shutdown callbacks, leading to a use-after-free condition and a kernel crash. Additionally, dangling chained handlers for peripheral and syswake interrupts may cause spurious interrupts to access freed memory.

Recommendations Set the IRQ DOMAIN FLAG DESTROY GC flag in domain->flags to ensure the core code automatically removes generic chips during irq domain remove(). Clear all chained handlers by setting them to NULL within the pdc intc remove() function.