CVE-2026-31545: NFC: nxp-nci: allow GPIOs to sleep
In the Linux kernel, the following vulnerability has been resolved:
NFC: nxp-nci: allow GPIOs to sleep
Allow the firmware and enable GPIOs to sleep.
This fixes a WARNON' and allows the driver to operate GPIOs which are connected to I2C GPIO expanders.
-- >8 -- kernel: WARNING: CPU: 3 PID: 2636 at drivers/gpio/gpiolib.c:3880 gpiodsetvalue+0x88/0x98 -- >8 --
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Allow the firmware and enable GPIOs to sleep so the driver can operate GPIOs connected to I2C GPIO expanders.
Linux kernel NFC nxp-nci driver GPIO sleep = enabled
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
Systems using the Linux kernel's nxp-nci NFC driver are affected when its firmware or enable GPIOs are connected through I2C GPIO expanders. The issue concerns GPIO operations that may sleep.
What access does an attacker need to cause an impact?
The supplied CVSS vector indicates local access and low privileges are required, with no user interaction. The stated impact is availability only; confidentiality and integrity impacts are not indicated.
How can I tell whether this is relevant to my hardware configuration?
Check whether the nxp-nci NFC driver is in use and whether its firmware or enable GPIO lines are provided by an I2C GPIO expander. Affected systems may produce a kernel WARNING from gpiod_set_value in drivers/gpio/gpiolib.c.
What should be done to remediate it?
Apply a Linux kernel update containing the referenced stable commits. The fix allows the nxp-nci driver's firmware and enable GPIOs to sleep, removing the warning and supporting GPIOs connected through I2C expanders.