In the Linux kernel, the following vulnerability has been resolved:
gpio: aggregator: fix a potential use-after-free
On error we free aggr->lookups->dev_id before removing the entry from the lookup table. If a concurrent thread calls gpiod_find() before we remove the entry, it could iterate over the list and call gpiod_match_lookup_table() which unconditionally dereferences dev_id when calling strcmp(). Reverse the order of cleanup.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-gcp-64kUpgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-azure-7.0Upgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-raspi-7.0Upgrade linux-image-7.0.0-1014-azureUpgrade linux-image-aws-7.0Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-aws-64kUpgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-nvidia-bosUpgrade linux-image-azure-fdeUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-ibm-7.0Upgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-raspiUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-azure-fde-7.0Upgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-azureUpgrade linux-image-oracle-7.0Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-gcp-7.0Upgrade linux-image-ibmUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-raspi-realtimeUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-nvidia-7.0Upgrade linux-image-nvidia-64k-7.0 | Jul 21, 2026 | Jul 20, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub