CVE-2026-64022: gpio: aggregator: remove the software node when deactivating the aggregator
In the Linux kernel, the following vulnerability has been resolved:
gpio: aggregator: remove the software node when deactivating the aggregator
The dynamic software node we create for the aggregator platform device when using configfs is leaked when the device is deactivated. Destroy it as the last step in the tear-down path.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Remove the dynamically created software node when deactivating the aggregator to prevent it from being leaked.
gpio aggregator using configfs software node on deactivation = remove
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64022?
CVE-2026-64022 has a risk severity rating of 5.
How do I fix CVE-2026-64022?
To fix CVE-2026-64022, ensure you are using a patched version of the Linux kernel where the vulnerability has been resolved.
What systems are affected by CVE-2026-64022?
CVE-2026-64022 affects systems using the Linux kernel with the gpio aggregator functionality that has not been updated to the latest security patch.
What is the impact of CVE-2026-64022?
The impact of CVE-2026-64022 involves the leakage of a dynamic software node in the Linux kernel when the aggregator platform device is deactivated.
When was CVE-2026-64022 published?
CVE-2026-64022 was published on July 19, 2026.