{"id":"CVE-2026-72324","summary":"gpio: mvebu: free generic chips on unbind","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: mvebu: free generic chips on unbind\n\nirq_alloc_domain_generic_chips() allocates generic chip data that must\nbe freed via irq_domain_remove_generic_chips(). The devres action\nmvebu_gpio_remove_irq_domain() only called irq_domain_remove(), which\nonly frees the generic chips if IRQ_DOMAIN_FLAG_DESTROY_GC is set.\nCall irq_domain_remove_generic_chips() explicitly before\nirq_domain_remove() instead.","modified":"2026-11-13T04:06:44.335072228Z","published":"2026-08-15T05:55:35.475Z","related":["SUSE-SU-2026:24643-1","SUSE-SU-2026:24648-1","SUSE-SU-2026:24651-1","SUSE-SU-2026:24662-1"],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72324.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/3649b04f86b95243fa0c845695051455fa2ba40b"},{"type":"WEB","url":"https://git.kernel.org/stable/c/3bfcce441c552133adeeb99c294d0ce8a62612ef"},{"type":"WEB","url":"https://git.kernel.org/stable/c/b11c513ad943f35cf5e8007d3a56279c79b7ed4b"},{"type":"WEB","url":"https://git.kernel.org/stable/c/d73e4d790db611da7439e78a6ab6cb32e7885ab8"},{"type":"WEB","url":"https://git.kernel.org/stable/c/db2b40dc12cd6ae4704f52d62c0147ef31527f60"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72324.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72324"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"812d47889a8e418d7bea9bec383581a34c19183e"},{"fixed":"db2b40dc12cd6ae4704f52d62c0147ef31527f60"},{"fixed":"3649b04f86b95243fa0c845695051455fa2ba40b"},{"fixed":"3bfcce441c552133adeeb99c294d0ce8a62612ef"},{"fixed":"d73e4d790db611da7439e78a6ab6cb32e7885ab8"},{"fixed":"b11c513ad943f35cf5e8007d3a56279c79b7ed4b"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"f0cde54863da281cec1ed85497b4ec58d29c1460"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"7a9239fd04802ee6ddf82d211cff3ee7df9c473a"}]}],"versions":["v3.16.85","v3.16.84","v3.16.83","v3.16.82","v3.16.81","v3.16.80","v3.16.79","v3.16.78","v3.16.77","v3.16.76","v3.16.75","v3.16.74","v3.16.73","v3.16.72","v3.16.71","v3.16.70","v3.16.69","v3.16.68","v3.16.67","v3.16.66","v3.16.65","v3.16.64","v3.16.63","v3.16.62","v3.16.61","v3.16.60","v3.16.59","v3.16.58","v3.16.57","v3.16.56","v3.16.55","v3.16.54","v3.16.53","v3.16.52","v3.16.51","v3.16.50","v3.16.49","v3.16.48","v3.16.47","v3.16.46","v3.16.45","v3.16.44","v3.16.43","v3.16.42","v3.16.41","v3.16.40","v4.8.17","v4.8.16","v4.8.15","v4.8.14","v4.8.13","v4.8.12","v4.8.11","v4.8.10","v4.8.9"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-72324.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.16.40"},{"fixed":"3.17"}]},{"type":"ECOSYSTEM","events":[{"introduced":"4.8.9"},{"fixed":"4.9"}]},{"type":"ECOSYSTEM","events":[{"introduced":"4.9.0"},{"fixed":"6.6.160"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.97"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.40"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.1.5"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-72324.json"}}],"schema_version":"1.9.2"}