CVE-2026-99257 PUBLISHED

gpio: shared: gracefully handle no-device lookup of shared GPIOs

Assigner: Linux
Reserved: 25.09.2026 Published: 03.11.2026 Updated: 03.11.2026

In the Linux kernel, the following vulnerability has been resolved:

gpio: shared: gracefully handle no-device lookup of shared GPIOs

We use platform lookup tables for shared GPIOs. This mechanism needs a struct device to work so fwnode-based lookup with no device associated currently causes a NULL-pointer deference.

Adding this functionality will require a larger rework and it has never worked anyway so add a check that allows the kernel to gracefully handle this situation with an error ahead of implementing that functionality as a new feature.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from a060b8c511abb0997381b397e52149a5e3e5259a to 7f9eb6aaf9a3ab7fa2b7dcc38660c27db12d4ec1 (excl.)
  • affected from a060b8c511abb0997381b397e52149a5e3e5259a to cf73c3fc03c43a8a86fd487c62390b4744eff9ec (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.19 is affected
  • unaffected from 0 to 6.19 (excl.)
  • unaffected from 7.2.13 to 7.2.* (incl.)
  • unaffected from 7.3 to * (incl.)

References