CVE-2026-64023
kernel: gpio: aggregator: fix a potential use-after-free
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 19, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's GPIO (General Purpose Input/Output) aggregator module. This vulnerability occurs when an error condition causes memory to be prematurely freed while still being referenced in a lookup table. A local attacker could potentially exploit this timing issue, leading to a use-after-free condition. This could result in a system crash or other unpredictable behavior, impacting system stability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-825 · Expired Pointer Dereference