CVE-2026-43138
kernel: reset: gpio: suppress bind attributes in sysfs
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 6, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel. A local user could exploit a vulnerability in the GPIO (General Purpose Input/Output) reset controller by unbinding a dynamically created device through the sysfs (a virtual filesystem providing an interface to kernel data structures) interface. This improper handling of device unbinding can lead to a use-after-free condition, which may result in system instability or a denial of service.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-825 · Expired Pointer Dereference