All vulnerabilities
CVE-2026-99162

Linux: gpio: shared: fix use-after-free bug when adding shared proxies

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in8861491f8501516429e0e6c9d7a056480047227cFixed versionCVE List
Published28 Oct 2026Updated 28 Oct 2026CVE List

What fixes it

  • 8861491f8501516429e0e6c9d7a056480047227cLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

gpio: shared: fix use-after-free bug when adding shared proxies

The GPIO lookup table can stay alive for longer than the kobject whose name string's address we're assigning to lookup->dev_id. Fix a potential UAF by duplicating the string.

Text from CVE List

Affected versions 6

  • Linuxaffected: a060b8c511abb0997381b397e52149a5e3e5259a before 8861491f8501516429e0e6c9d7a056480047227cCVE List
  • Linuxaffected: a060b8c511abb0997381b397e52149a5e3e5259a before bd22f7e63509fa758cf500d9af3e88a3d3df96beCVE List
  • Linuxaffected: 6.19CVE List
  • Linuxunaffected: all versions before 6.19CVE List
  • Linuxunaffected: 7.2.13 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 2