CVE-2026-89769

In the Linux kernel, the following vulnerability has been resolved:

clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp setup state error path

When cpuhp setup state fails after pit clockevent per cpu init has successfully called request irq, the error handling jumps directly to out pit clocksource unregister without freeing the registered IRQ.

This leaks the IRQ line and, since kfree(pit) follows, leaves a dangling pointer registered as the interrupt handler's dev id, potentially leading to a use-after-free if the IRQ fires afterwards.

Fix it by calling pit clockevent per cpu exit to properly release the IRQ before falling through to the existing cleanup chain.