In the Linux kernel, the following vulnerability has been resolved:
crypto: qat - fix IRQ cleanup on 6xxx probe failure
When adf_dev_up() partially completes and then fails, the IRQ handlers registered during adf_isr_resource_alloc() are not detached before the MSI-X vectors are released.
Since the device is enabled with pcim_enable_device(), calling pci_alloc_irq_vectors() internally registers pcim_msi_release() as a devres action. On probe failure, devres runs pcim_msi_release() which calls pci_free_irq_vectors(), tearing down the MSI-X vectors while IRQ handlers (for example 'qat0-bundle0') are still attached. This causes remove_proc_entry() warnings:
[ 22.163964] remove_proc_entry: removing non-empty directory 'irq/143', leaking at least 'qat0-bundle0'
Moving the devm_add_action_or_reset() before adf_dev_up() does not solve the problem since devres runs in LIFO order and pcim_msi_release(), registered later inside adf_dev_up(), would still fire before adf_device_down().
Fix by calling adf_dev_down() explicitly when adf_dev_up() fails, to properly free IRQ handlers before devres releases the MSI-X vectors.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 27, 2026 |
| Ubuntu | — | Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-genericUpgrade linux-image-oem-26.04aUpgrade linux-image-7.0.0-1013-nvidiaUpgrade linux-image-7.0.0-1007-gcpUpgrade linux-image-7.0.0-27-realtime-64kUpgrade linux-image-oem-24.04Upgrade linux-image-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-24.04aUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-generic-64k-7.0Upgrade linux-image-oracle-7.0Upgrade linux-image-gcpUpgrade linux-image-7.0.0-1007-oracle-64kUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-aws-64kUpgrade linux-image-oem-24.04dUpgrade linux-image-azure-7.0Upgrade linux-image-7.0.0-1007-gcp-64kUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-generic-64kUpgrade linux-image-ibmUpgrade linux-image-ibm-7.0Upgrade linux-image-nvidia-64kUpgrade linux-image-7.0.0-1013-nvidia-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-7.0.0-27-realtimeUpgrade linux-image-azureUpgrade linux-image-7.0.0-1008-oemUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-oem-26.04Upgrade linux-image-oem-7.0Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-gcp-64kUpgrade linux-image-7.0.0-27-generic-64kUpgrade linux-image-7.0.0-1014-raspiUpgrade linux-image-raspi-7.0Upgrade linux-image-generic-7.0Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-gcp-7.0Upgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-1007-oracleUpgrade linux-image-realtime-7.0Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-virtualUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-aws-7.0Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-realtimeUpgrade linux-image-oracleUpgrade linux-image-7.0.0-27-genericUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-7.0.0-1008-aws-64kUpgrade linux-image-7.0.0-1014-raspi-realtimeUpgrade linux-image-7.0.0-1008-awsUpgrade linux-image-virtual-7.0Upgrade linux-image-nvidia-7.0Upgrade linux-image-azure-fde-7.0Upgrade linux-image-azure-fdeUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-awsUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-7.0.0-1009-ibmUpgrade linux-image-realtime-64kUpgrade linux-image-oem-24.04c | Jul 1, 2026 | May 27, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub