CVE Database›Document archive›CVE-2026-64023

CVE-2026-64023

kernel: gpio: aggregator: fix a potential use-after-free

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 19, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's GPIO (General Purpose Input/Output) aggregator module. This vulnerability occurs when an error condition causes memory to be prematurely freed while still being referenced in a lookup table. A local attacker could potentially exploit this timing issue, leading to a use-after-free condition. This could result in a system crash or other unpredictable behavior, impacting system stability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-825 · Expired Pointer Dereference