CVE-2026-92524

Not scored yetLast modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc()

When its_irq_gic_domain_alloc() fails, the following its_vpe_irq_domain_free() fails to invoke its_vep_teardown() for the corresponding interrupt, which leaks the resource.

Invoke its_vpe_teardown() in the error handling path to avoid the leak.

[ tglx: Massaged change log ]

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 7d75bbb4bc1ad90386776459d37e4ddfe605671e, < 82bccf7f9a12bf0eec9774968f6a853020ea26d3; >= 7d75bbb4bc1ad90386776459d37e4ddfe605671e, < 6cd7e9b5463e1bceddcaf4acec6ca0f12553455b; >= 7d75bbb4bc1ad90386776459d37e4ddfe605671e, < 05c199d6b806ed1cc64807062f9986f11315e8ab; >= 7d75bbb4bc1ad90386776459d37e4ddfe605671e, < c4643bcb3bdda96b7292d6ab6ed196755a5bc304; >= 7d75bbb4bc1ad90386776459d37e4ddfe605671e, < 0d1951a1935a11c197272dbd38349033f0ef8991; >= 7d75bbb4bc1ad90386776459d37e4ddfe605671e, < 6eb1f1414bf70185dad2525ecac5411db551faa2; >= 7d75bbb4bc1ad90386776459d37e4ddfe605671e, < d324c4353f64190a032c78d6e07be6d57ddfb2f1; >= 7d75bbb4bc1ad90386776459d37e4ddfe605671e, < 325ff3e78c64cd619d52b99f7c8b09a3f31e1495
LinuxLinux4.14

References

Timeline

Published
Sep 17, 2026
Last modified
Oct 19, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-925257.1In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] For CVE-2026-925266.3A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/leave/index.php. ExeCVE-2026-925276.3A vulnerability has been found in chatwoot up to 4.17.1. This impacts an unknown function of the file callbacks_controller.rb of the componeCVE-2026-925284.2GitLab has remediated an issue in GitLab EE affecting all versions from 16.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 thatCVE-2026-925294.3GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that CVE-2026-92537.2The WP Cost Estimation & Payment Forms Builder (E&P Forms) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'customCVE-2026-925304.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 thCVE-2026-925317.5Operating system command injection vulnerability in the SVN integration component of BugTracker.NET. The application incorporates the value CVE-2026-925327.5Unrestricted file upload vulnerability in the BugTracker.NET attachment functionality. An authenticated user with administrator privileges cCVE-2026-925337.1Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly vaCVE-2026-925368.8The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPreCVE-2026-925375.3The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Insufficiently Protected Credentials in all versio
CVE-2026-92524: Unscored | Vulnix