In the Linux kernel, the following vulnerability has been resolved:
gpiolib: cdev: fix NULL-pointer dereferences
There are several places where we can crash the kernel by requesting lines, unbinding the GPIO device, then calling any of the system calls relevant to the GPIO character device's annonymous file descriptors: ioctl(), read(), poll().
While I observed it with the GPIO simulator, it will also happen for any of the GPIO devices that can be hot-unplugged - for instance any HID GPIO expander (e.g. CP2112).
This affects both v1 and v2 uAPI.
This fixes it partially by checking if gdev->chip is not NULL but it doesn't entirely remedy the situation as we still have a race condition in which another thread can remove the device after the check.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-livepatch-5.15.86-53.137Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.165-143.735Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Oct 3, 2025 | Oct 3, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Nov 14, 2025 | Oct 1, 2025 |
| Ubuntu | — | Upgrade linux-azureUpgrade linux-azure-fdeUpgrade linux-gcp-5.15Upgrade linux-gkeUpgrade linux-nvidia-tegra-5.15Upgrade linux-riscv-5.15Upgrade linux-nvidiaUpgrade linux-oracle-5.15Upgrade linux-realtimeUpgrade linux-raspiUpgrade linux-aws-5.15Upgrade linux-hwe-5.15Upgrade linux-lowlatencyUpgrade linux-intel-iotgUpgrade linux-lowlatency-hwe-5.15Upgrade linux-ibmUpgrade linux-gkeopUpgrade linux-bluefieldUpgrade linux-intel-iot-realtimeUpgrade linux-kvmUpgrade linux-oracleUpgrade linux-azure-5.15Upgrade linux-intel-iotg-5.15Upgrade linuxUpgrade linux-awsUpgrade linux-gcp | Oct 10, 2025 | Oct 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Oct 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub