CVE-2026-43138: reset: gpio: suppress bind attributes in sysfs
In the Linux kernel, the following vulnerability has been resolved:
reset: gpio: suppress bind attributes in sysfs
This is a special device that's created dynamically and is supposed to stay in memory forever. We also currently don't have a devlink between it and the actual reset consumer. Suppress sysfs bind attributes so that user-space can't unbind the device because - as of now - it will cause a use-after-free splat from any user that puts the reset control handle.
Affected Software
Remediation
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The CVSS vector indicates local access with low privileges is required. No user interaction is required.
What action triggers the use-after-free condition?
The condition occurs when user space unbinds the dynamically created GPIO reset device through its sysfs bind attributes. A later user of the reset-control handle can then trigger a use-after-free.
What can be done if the patch cannot be deployed immediately?
Prevent user space from unbinding the affected dynamically created device through its sysfs bind attributes. The fix removes those attributes to stop this unbind path.
What is the potential security impact?
The CVSS vector rates confidentiality, integrity, and availability impacts as high. The reported flaw is a use-after-free in the Linux kernel.