---
id: CVE-2026-72324
title: 'gpio: mvebu: free generic chips on unbind'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  gpio: mvebu: free generic chips on unbind

  irq_alloc_domain_generic_chips() allocates generic chip data that must
  be freed via irq_domain_remove_generic_chips(). The de…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 812d47889a8e418d7bea9bec383581a34c19183e <
    db2b40dc12cd6ae4704f52d62c0147ef31527f60
  - >-
    Linux >= 812d47889a8e418d7bea9bec383581a34c19183e <
    3649b04f86b95243fa0c845695051455fa2ba40b
  - >-
    Linux >= 812d47889a8e418d7bea9bec383581a34c19183e <
    3bfcce441c552133adeeb99c294d0ce8a62612ef
  - >-
    Linux >= 812d47889a8e418d7bea9bec383581a34c19183e <
    d73e4d790db611da7439e78a6ab6cb32e7885ab8
  - >-
    Linux >= 812d47889a8e418d7bea9bec383581a34c19183e <
    b11c513ad943f35cf5e8007d3a56279c79b7ed4b
  - Linux f0cde54863da281cec1ed85497b4ec58d29c1460
  - Linux 7a9239fd04802ee6ddf82d211cff3ee7df9c473a
  - Linux >= 3.16.40 < 3.17
  - Linux >= 4.8.9 < 4.9
  - Linux 4.9
published: '2026-08-15'
updated: '2026-10-21'
sourceUpdated: '2026-10-21T12:44:34.047Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-72324'
references:
  - url: 'https://git.kernel.org/stable/c/db2b40dc12cd6ae4704f52d62c0147ef31527f60'
  - url: 'https://git.kernel.org/stable/c/3649b04f86b95243fa0c845695051455fa2ba40b'
  - url: 'https://git.kernel.org/stable/c/3bfcce441c552133adeeb99c294d0ce8a62612ef'
  - url: 'https://git.kernel.org/stable/c/d73e4d790db611da7439e78a6ab6cb32e7885ab8'
  - url: 'https://git.kernel.org/stable/c/b11c513ad943f35cf5e8007d3a56279c79b7ed4b'
tags:
  - cve.org
epss: 0.00209
epssPercentile: 0.10425
ingestedAt: '2026-10-21T12:48:53.592Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

gpio: mvebu: free generic chips on unbind

irq_alloc_domain_generic_chips() allocates generic chip data that must
be freed via irq_domain_remove_generic_chips(). The devres action
mvebu_gpio_remove_irq_domain() only called irq_domain_remove(), which
only frees the generic chips if IRQ_DOMAIN_FLAG_DESTROY_GC is set.
Call irq_domain_remove_generic_chips() explicitly before
irq_domain_remove() instead.

## Affected

- `Linux >= 812d47889a8e418d7bea9bec383581a34c19183e < db2b40dc12cd6ae4704f52d62c0147ef31527f60`
- `Linux >= 812d47889a8e418d7bea9bec383581a34c19183e < 3649b04f86b95243fa0c845695051455fa2ba40b`
- `Linux >= 812d47889a8e418d7bea9bec383581a34c19183e < 3bfcce441c552133adeeb99c294d0ce8a62612ef`
- `Linux >= 812d47889a8e418d7bea9bec383581a34c19183e < d73e4d790db611da7439e78a6ab6cb32e7885ab8`
- `Linux >= 812d47889a8e418d7bea9bec383581a34c19183e < b11c513ad943f35cf5e8007d3a56279c79b7ed4b`
- `Linux f0cde54863da281cec1ed85497b4ec58d29c1460`
- `Linux 7a9239fd04802ee6ddf82d211cff3ee7df9c473a`
- `Linux >= 3.16.40 < 3.17`
- `Linux >= 4.8.9 < 4.9`
- `Linux 4.9`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.