Answer in brief
CVE-2026-72324 records a Unknown severity vulnerability in gpio: mvebu: free generic chips on unbind. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=812d47889a8e418d7bea9bec383581a34c19183e <3649b04f86b95243fa0c845695051455fa2ba40b || >=812d47889a8e418d7bea9bec383581a34c19183e <3bfcce441c552133adeeb99c294d0ce8a62612ef || >=812d47889a8e418d7bea9bec383581a34c19183e <d73e4d790db611da7439e78a6ab6cb32e7885ab8 || >=812d47889a8e418d7bea9bec383581a34c19183e <b11c513ad943f35cf5e8007d3a56279c79b7ed4b || f0cde54863da281cec1ed85497b4ec58d29c1460 || 7a9239fd04802ee6ddf82d211cff3ee7df9c473a || >=3.16.40 <3.17 || >=4.8.9 <4.9 | 3649b04f86b95243fa0c845695051455fa2ba40b, 3bfcce441c552133adeeb99c294d0ce8a62612ef, d73e4d790db611da7439e78a6ab6cb32e7885ab8, b11c513ad943f35cf5e8007d3a56279c79b7ed4b, 3.17, 4.9 |
| Linux/Linuxgeneric | 4.9 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: gpio: mvebu: free generic chips on unbind irq_alloc_domain_generic_chips() allocates generic chip data that must be freed via irq_domain_remove_generic_chips(). The devres action mvebu_gpio_remove_irq_domain() only called irq_domain_remove(), which only frees the generic chips if IRQ_DOMAIN_FLAG_DESTROY_GC is set. Call irq_domain_remove_generic_chips() explicitly before irq_domain_remove() instead.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-72324 records a Unknown severity vulnerability in gpio: mvebu: free generic chips on unbind. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=812d47889a8e418d7bea9bec383581a34c19183e <3649b04f86b95243fa0c845695051455fa2ba40b || >=812d47889a8e418d7bea9bec383581a34c19183e <3bfcce441c552133adeeb99c294d0ce8a62612ef || >=812d47889a8e418d7bea9bec383581a34c19183e <d73e4d790db611da7439e78a6ab6cb32e7885ab8 || >=812d47889a8e418d7bea9bec383581a34c19183e <b11c513ad943f35cf5e8007d3a56279c79b7ed4b || f0cde54863da281cec1ed85497b4ec58d29c1460 || 7a9239fd04802ee6ddf82d211cff3ee7df9c473a || >=3.16.40 <3.17 || >=4.8.9 <4.9 | 3649b04f86b95243fa0c845695051455fa2ba40b, 3bfcce441c552133adeeb99c294d0ce8a62612ef, d73e4d790db611da7439e78a6ab6cb32e7885ab8, b11c513ad943f35cf5e8007d3a56279c79b7ed4b, 3.17, 4.9 |
| Linux/Linuxgeneric | 4.9 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: gpio: mvebu: free generic chips on unbind irq_alloc_domain_generic_chips() allocates generic chip data that must be freed via irq_domain_remove_generic_chips(). The devres action mvebu_gpio_remove_irq_domain() only called irq_domain_remove(), which only frees the generic chips if IRQ_DOMAIN_FLAG_DESTROY_GC is set. Call irq_domain_remove_generic_chips() explicitly before irq_domain_remove() instead.
Quoted source text, attributed separately from HOL analysis.