In the Linux kernel, the following vulnerability has been resolved:
crypto: qat - fix IRQ cleanup on 6xxx probe failure
When adf_dev_up() partially completes and then fails, the IRQ handlers registered during adf_isr_resource_alloc() are not detached before the MSI-X vectors are released.
Since the device is enabled with pcim_enable_device(), calling pci_alloc_irq_vectors() internally registers pcim_msi_release() as a devres action. On probe failure, devres runs pcim_msi_release() which calls pci_free_irq_vectors(), tearing down the MSI-X vectors while IRQ handlers (for example 'qat0-bundle0') are still attached. This causes remove_proc_entry() warnings:
[ 22.163964] remove_proc_entry: removing non-empty directory 'irq/143', leaking at least 'qat0-bundle0'
Moving the devm_add_action_or_reset() before adf_dev_up() does not solve the problem since devres runs in LIFO order and pcim_msi_release(), registered later inside adf_dev_up(), would still fire before adf_device_down().
Fix by calling adf_dev_down() explicitly when adf_dev_up() fails, to properly free IRQ handlers before devres releases the MSI-X vectors.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 27, 2026 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-7.0.0-1014-raspi-realtimeUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-oem-24.04cUpgrade linux-image-aws-7.0Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-7.0.0-1008-aws-64kUpgrade linux-image-azure-fdeUpgrade linux-image-azure-fde-7.0Upgrade linux-image-7.0.0-28-genericUpgrade linux-image-virtual-7.0Upgrade linux-image-nvidia-7.0Upgrade linux-image-7.0.0-1008-awsUpgrade linux-image-7.0.0-1014-raspiUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-generic-7.0Upgrade linux-image-7.0.0-27-genericUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-realtime-64kUpgrade linux-image-7.0.0-1009-ibmUpgrade linux-image-oracleUpgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-awsUpgrade linux-image-7.0.0-1007-oracleUpgrade linux-image-7.0.0-27-generic-64kUpgrade linux-image-realtime-7.0Upgrade linux-image-gcp-7.0Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-realtimeUpgrade linux-image-aws-64k-7.0Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-raspi-7.0Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-raspiUpgrade linux-image-azure-7.0Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-gcpUpgrade linux-image-oracle-7.0Upgrade linux-image-generic-64k-7.0Upgrade linux-image-azureUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-generic-64kUpgrade linux-image-7.0.0-1013-nvidia-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-7.0.0-27-realtimeUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-oem-24.04dUpgrade linux-image-nvidia-64kUpgrade linux-image-7.0.0-1007-gcp-64kUpgrade linux-image-ibm-7.0Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-7.0Upgrade linux-image-oem-26.04aUpgrade linux-image-oem-26.04Upgrade linux-image-genericUpgrade linux-image-gcp-64kUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-7.0.0-1008-oemUpgrade linux-image-7.0.0-1007-gcpUpgrade linux-image-ibmUpgrade linux-image-7.0.0-1013-nvidiaUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-7.0.0-1007-oracle-64kUpgrade linux-image-7.0.0-27-realtime-64kUpgrade linux-image-nvidia | Jul 1, 2026 | May 27, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub