Vulnerability in Linux

[ Description ]Official description

In the Linux kernel, the following vulnerability has been resolved: gpio: shared: gracefully handle no-device lookup of shared GPIOs We use platform lookup tables for shared GPIOs. This mechanism needs a struct device to work so fwnode-based lookup with no device associated currently causes a NULL-pointer deference. Adding this functionality will require a larger rework and it has never worked anyway so add a check that allows the kernel to gracefully handle this situation with an error ahead of implementing that functionality as a new feature.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund2 Nov 2026WID-SEC-2026-4302

  Linux Kernel: Multiple vulnerabilities allow an unspecified attack Translated from German

  Risk mediumCVE-2026-99237CVE-2026-99264CVE-2026-99220+50 more CVEs

[ References ]References

• git.kernel.org/stable/c/7f9eb6aaf9a3ab7fa2b7dcc38660c27db12d4ec1
• git.kernel.org/stable/c/cf73c3fc03c43a8a86fd487c62390b4744eff9ec