CVE-2026-99162 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: gpio: shared: fix use-after-free bug when adding shared proxies The GPIO lookup table can stay alive for longer than the kobject whose name string's address we're assigning to lookup->dev_id. Fix a potential UAF by duplicating the string.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux	Linux Linux Kernel

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/8861491f8501516429e0e6c9d7a056480047227c
https://git.kernel.org/stable/c/bd22f7e63509fa758cf500d9af3e88a3d3df96be

History

Wed, 28 Oct 2026 14:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-416

Wed, 28 Oct 2026 14:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Linux linux
Vendors & Products		Linux linux

Wed, 28 Oct 2026 10:45:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: gpio: shared: fix use-after-free bug when adding shared proxies The GPIO lookup table can stay alive for longer than the kobject whose name string's address we're assigning to lookup->dev_id. Fix a potential UAF by duplicating the string.
Title		gpio: shared: fix use-after-free bug when adding shared proxies
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/8861491f8501516429e0e6c9d7a056480047227c https://git.kernel.org/stable/c/bd22f7e63509fa758cf500d9af3e88a3d3df96be

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-10-28T10:35:14.755Z

Updated: 2026-10-28T10:35:14.755Z

Reserved: 2026-09-25T10:25:14.397Z

Link: CVE-2026-99162

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-10-28T11:17:36.500

Modified: 2026-10-28T11:17:36.500

Link: CVE-2026-99162

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-99162", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.397Z", "datePublished": "2026-10-28T10:35:14.755Z", "dateUpdated": "2026-10-28T10:35:14.755Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-28T10:35:14.755Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: shared: fix use-after-free bug when adding shared proxies\n\nThe GPIO lookup table can stay alive for longer than the kobject whose\nname string's address we're assigning to lookup->dev_id. Fix a potential\nUAF by duplicating the string."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpio/gpiolib-shared.c"], "versions": [{"version": "a060b8c511abb0997381b397e52149a5e3e5259a", "lessThan": "8861491f8501516429e0e6c9d7a056480047227c", "status": "affected", "versionType": "git"}, {"version": "a060b8c511abb0997381b397e52149a5e3e5259a", "lessThan": "bd22f7e63509fa758cf500d9af3e88a3d3df96be", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpio/gpiolib-shared.c"], "versions": [{"version": "6.19", "status": "affected"}, {"version": "0", "lessThan": "6.19", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.13", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.19", "versionEndExcluding": "7.2.13"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.19", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/8861491f8501516429e0e6c9d7a056480047227c"}, {"url": "https://git.kernel.org/stable/c/bd22f7e63509fa758cf500d9af3e88a3d3df96be"}], "title": "gpio: shared: fix use-after-free bug when adding shared proxies", "x_generator": {"engine": "bippy-1.2.0"}}}}