In the Linux kernel, the following vulnerability has been resolved:
gpiolib: Fix potential NULL pointer dereference in gpiod_get_label()
In `gpiod_get_label()`, it is possible that `srcu_dereference_check()` may return a NULL pointer, leading to a scenario where `label->str` is accessed without verifying if `label` itself is NULL.
This patch adds a proper NULL check for `label` before accessing `label->str`. The check for `label->str != NULL` is removed because `label->str` can never be NULL if `label` is not NULL.
This fixes the issue where the label name was being printed as `(efault)` when dumping the sysfs GPIO file when `label == NULL`.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-azureUpgrade linux-image-generic-64kUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-gcpUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-oem-24.04bUpgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-hwe-24.04 | Feb 20, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub