CVE-2026-99162unknown
gpio: shared: fix use-after-free bug when adding shared proxies
Impact
In the Linux kernel, the following vulnerability has been resolved:
Source excerpt · LinuxAffected packages
This source has no supported package-version data for matching. You can read the advisory here, but this record alone cannot power a dependency check.
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
Linux · Linux
Other versions: unaffected
| Version / range | Source status |
|---|---|
| a060b8c511abb0997381b397e52149a5e3e5259a to before 8861491f8501516429e0e6c9d7a056480047227c | affected |
| a060b8c511abb0997381b397e52149a5e3e5259a to before bd22f7e63509fa758cf500d9af3e88a3d3df96be | affected |
Linux · Linux
Other versions: affected
| Version / range | Source status |
|---|---|
| 6.19 | affected |
| 0 to before 6.19 | unaffected |
| 7.2.13 through 7.2.* (inclusive) | unaffected |
| 7.3 through * (inclusive) | unaffected |
Original source description
In the Linux kernel, the following vulnerability has been resolved:
gpio: shared: fix use-after-free bug when adding shared proxies
The GPIO lookup table can stay alive for longer than the kobject whose name string's address we're assigning to lookup->dev_id. Fix a potential UAF by duplicating the string.