Linux Kernel GPIO: Gracefully Handle NULL in NoDevice Shared GPIO Lookup
CVE-2026-99257 Published on November 3, 2026
gpio: shared: gracefully handle no-device lookup of shared GPIOs
In the Linux kernel, the following vulnerability has been resolved:
gpio: shared: gracefully handle no-device lookup of shared GPIOs
We use platform lookup tables for shared GPIOs. This mechanism needs a
struct device to work so fwnode-based lookup with no device associated
currently causes a NULL-pointer deference.
Adding this functionality will require a larger rework and it has never
worked anyway so add a check that allows the kernel to gracefully handle
this situation with an error ahead of implementing that functionality as
a new feature.
Products Associated with CVE-2026-99257
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version a060b8c511abb0997381b397e52149a5e3e5259a and below 7f9eb6aaf9a3ab7fa2b7dcc38660c27db12d4ec1 is affected.
- Version a060b8c511abb0997381b397e52149a5e3e5259a and below cf73c3fc03c43a8a86fd487c62390b4744eff9ec is affected.
- Version 6.19 is affected.
- Before 6.19 is unaffected.
- Version 7.2.13, <= 7.2.* is unaffected.
- Version 7.3, <= * is unaffected.