GHSA-WW3R-FJGM-2RCQ
Vulnerability from github – Published: 2026-09-11 21:31 – Updated: 2026-09-11 21:31In the Linux kernel, the following vulnerability has been resolved:
PCI: plda: Fix IRQ domain leaks in the error paths of plda_init_interrupts()
plda_init_interrupts() initializes IRQ domains and creates IRQ mapping but does not unwind them when later step fails.
If platform_get_irq() or either irq_create_mapping() fails in plda_init_interrupts(), the domains are never deinitialized. If irq_create_mapping() fails, port->intx_irq stays initialized.
Hence, remove the IRQ domains in the error path by calling plda_pcie_irq_domain_deinit().
Since plda_pcie_irq_domain_deinit() now disposes of the intx_irq and msi_irq mappings itself before removing their domains, the msi_irq mapping failure path can go directly to err_irq_domain_deinit instead of disposing of port->intx_irq separately first.
This issue was found by automated review of sashiko-bot
[mani: commit log]
{
"affected": [],
"aliases": [
"CVE-2026-89454"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-09-11T20:19:26Z",
"severity": null
},
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: plda: Fix IRQ domain leaks in the error paths of plda_init_interrupts()\n\nplda_init_interrupts() initializes IRQ domains and creates IRQ mapping but\ndoes not unwind them when later step fails.\n\nIf platform_get_irq() or either irq_create_mapping() fails\nin plda_init_interrupts(), the domains are never deinitialized. If\nirq_create_mapping() fails, port-\u003eintx_irq stays initialized.\n\nHence, remove the IRQ domains in the error path by calling\nplda_pcie_irq_domain_deinit().\n\nSince plda_pcie_irq_domain_deinit() now disposes of the intx_irq and\nmsi_irq mappings itself before removing their domains, the msi_irq\nmapping failure path can go directly to err_irq_domain_deinit instead of\ndisposing of port-\u003eintx_irq separately first.\n\nThis issue was found by automated review of sashiko-bot\n\n[mani: commit log]",
"id": "GHSA-ww3r-fjgm-2rcq",
"modified": "2026-09-11T21:31:26Z",
"published": "2026-09-11T21:31:26Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89454"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/01b05cebe1e862e31e382359848d7dca02525a4f"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/19a30bbb6477bfd7e3109b7a2943e6597ee9de37"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/4b575052ea65423693726a21826d783cf3f1745e"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/e54e8d2a0f9c8bf251ae4385ea4f4a68840fedad"
}
],
"schema_version": "1.4.0",
"severity": []
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.