CVE-2026-72324

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the mvebu GPIO driver where generic chip data allocated by irq alloc domain generic chips() is not properly freed during unbind. The devres action mvebu gpio remove irq domain() calls irq domain remove(), which only releases generic chips if the IRQ DOMAIN FLAG DESTROY GC flag is set. To ensure proper memory management, irq domain remove generic chips() must be called explicitly before irq domain remove().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.