CVE-2026-98397
Description
In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown In gpio_secondary_fwnode_init(), acpi_bus_find_device_by_name() returns a device reference, but the local dev variable is declared with __free(put_device), dropping the reference at the end of each iteration. Meanwhile, devm_add_action_or_reset() saves the dev pointer for gpio_secondary_unset() without incrementing its reference count, which could lead to a use-after-free during driver teardown if the device is released in the interim. Acquire an explicit device reference with get_device() when registering the devres action, and drop it with put_device() inside gpio_secondary_unset().
How to fix
- Linux Linuxc62b6e081119f2ab03cfcafde1f83c0f50e8e726, 144113b0a70fa18033a747ee5db6803308f7688c or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 1448c2d2ca5cc7f4ea6694e6bc809946de0a751c ≤ v < c62b6e081119f2ab03cfcafde1f83c0f50e8e726, 1448c2d2ca5cc7f4ea6694e6bc809946de0a751c ≤ v < 144113b0a70fa18033a747ee5db6803308f7688c, 7.2 | c62b6e081119f2ab03cfcafde1f83c0f50e8e726, 144113b0a70fa18033a747ee5db6803308f7688c |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.