CVE Database›Document archive›CVE-2026-43138

CVE-2026-43138

kernel: reset: gpio: suppress bind attributes in sysfs

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 6, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel. A local user could exploit a vulnerability in the GPIO (General Purpose Input/Output) reset controller by unbinding a dynamically created device through the sysfs (a virtual filesystem providing an interface to kernel data structures) interface. This improper handling of device unbinding can lead to a use-after-free condition, which may result in system instability or a denial of service.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-825 · Expired Pointer Dereference