Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-99162

gpio: shared: fix use-after-free bug when adding shared proxies

Description

In the Linux kernel, the following vulnerability has been resolved: gpio: shared: fix use-after-free bug when adding shared proxies The GPIO lookup table can stay alive for longer than the kobject whose name string's address we're assigning to lookup->dev_id. Fix a potential UAF by duplicating the string.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a060b8c511abb0997381b397e52149a5e3e5259a to < 8861491f8501516429e0e6c9d7a056480047227caffected
  • a060b8c511abb0997381b397e52149a5e3e5259a to < bd22f7e63509fa758cf500d9af3e88a3d3df96beaffected

Linux Linux

Default version status: affected

  • 6.19affected
  • 0 to < 6.19unaffected
  • 7.2.13 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References