CVE-2026-99257
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: gpio: shared: gracefully handle no-device lookup of shared GPIOs We use platform lookup tables for shared GPIOs. This mechanism needs a struct device to work so fwnode-based lookup with no device associated currently causes a NULL-pointer deference. Adding this functionality will require a larger rework and it has never worked anyway so add a check that allows the kernel to gracefully handle this situation with an error ahead of implementing that functionality as a new feature.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedNov 3, 2026
First seenNov 4, 2026
How to fix
Update
- Linux Linux7f9eb6aaf9a3ab7fa2b7dcc38660c27db12d4ec1, cf73c3fc03c43a8a86fd487c62390b4744eff9ec or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | a060b8c511abb0997381b397e52149a5e3e5259a ≤ v < 7f9eb6aaf9a3ab7fa2b7dcc38660c27db12d4ec1, a060b8c511abb0997381b397e52149a5e3e5259a ≤ v < cf73c3fc03c43a8a86fd487c62390b4744eff9ec, 6.19 | 7f9eb6aaf9a3ab7fa2b7dcc38660c27db12d4ec1, cf73c3fc03c43a8a86fd487c62390b4744eff9ec |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.