PCI: plda: Fix IRQ domain leaks in the error paths of plda_init_interrupts() (CVE-2026-89454) | HOL Guard CVE

Unknown severity · Source severity not reportedCVE-2026-89454

PCI: plda: Fix IRQ domain leaks in the error paths of plda_init_interrupts()

Answer in brief

CVE-2026-89454 records a Unknown severity vulnerability in PCI: plda: Fix IRQ domain leaks in the error paths of plda_init_interrupts(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.

Analysis pending evidence review

HOL Guard separates source facts from reviewed analysis. See the methodology.

Published Sep 11, 2026Updated Sep 11, 2026Source checked Sep 11, 2026First seen by HOL Sep 11, 2026Material review Sep 11, 2026

Upstream Advisory

Key facts

Risk: Unknown severitySource severity not reported
Exploitation: Not marked as known exploited
Affected software: 2 mapped packages or products
Fix availability: Available

Why this deserves its current priority

A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.

Analysis status

Analysis pending evidence review

Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.

Affected scope and exposure questions

The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.

Mapped affected packages and fixed versions
Package	Affected range	Fixed version
Linux/Linuxgeneric	>=4602c370bdf6946b4e954a3db0ef5958aac2b7b4 <01b05cebe1e862e31e382359848d7dca02525a4f \|\| >=4602c370bdf6946b4e954a3db0ef5958aac2b7b4 <4b575052ea65423693726a21826d783cf3f1745e \|\| >=4602c370bdf6946b4e954a3db0ef5958aac2b7b4 <e54e8d2a0f9c8bf251ae4385ea4f4a68840fedad \|\| >=4602c370bdf6946b4e954a3db0ef5958aac2b7b4 <19a30bbb6477bfd7e3109b7a2943e6597ee9de37	01b05cebe1e862e31e382359848d7dca02525a4f, 4b575052ea65423693726a21826d783cf3f1745e, e54e8d2a0f9c8bf251ae4385ea4f4a68840fedad, 19a30bbb6477bfd7e3109b7a2943e6597ee9de37
Linux/Linuxgeneric	6.11	Not reported

Recommended response

Check inventory. Check lockfiles and deployed manifests for Linux/Linux, Linux/Linux.
Review the reported fix. Update Linux/Linux to 01b05cebe1e862e31e382359848d7dca02525a4f if you use the affected versions. Test the change in a non-production environment first.

Evidence timeline and material changes

Published upstream
Sep 11, 2026
Evidence: source:cvelist:source_dates:source-dates:record
Source modified
Sep 11, 2026
Evidence: source:cvelist:source_dates:source-dates:record
First seen by HOL
Sep 11, 2026

Sources and claim methodology

Upstream source description

In the Linux kernel, the following vulnerability has been resolved: PCI: plda: Fix IRQ domain leaks in the error paths of plda_init_interrupts() plda_init_interrupts() initializes IRQ domains and creates IRQ mapping but does not unwind them when later step fails. If platform_get_irq() or either irq_create_mapping() fails in plda_init_interrupts(), the domains are never deinitialized. If irq_create_mapping() fails, port->intx_irq stays initialized. Hence, remove the IRQ domains in the error path by calling plda_pcie_irq_domain_deinit(). Since plda_pcie_irq_domain_deinit() now disposes of the intx_irq and msi_irq mappings itself before removing their domains, the msi_irq mapping failure path can go directly to err_irq_domain_deinit instead of disposing of port->intx_irq separately first. This issue was found by automated review of sashiko-bot [mani: commit log]

Quoted source text, attributed separately from HOL analysis.