DEBIAN-CVE-2026-99162: Use After Free

Published Oct 28, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved: gpio: shared: fix use-after-free bug when adding shared proxies The GPIO lookup table can stay alive for longer than the kobject whose name string's address we're assigning to lookup->devid. Fix a potential UAF by duplicating the string.

Affected Software

1 affected component

debian/linux*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch gpio: shared: fix use-after-free bug when adding shared proxies

Event History

Oct 28, 2026

CVE Published

via OSV·11:17 AM

Data Sourced

via OSV·11:17 AM

DescriptionAffected Software

Frequently Asked Questions

What condition is required for this use-after-free to occur?

The issue can occur when adding shared GPIO proxies if a GPIO lookup table outlives the kobject whose name string address was assigned to lookup->dev_id. The stale device-ID string pointer can then be used after the originating kobject is freed.

Which systems are in scope based on the available information?

The affected software is identified as debian/linux. The provided information does not specify affected Debian releases, kernel versions, configurations, or whether the relevant GPIO shared-proxy path is enabled by default.

How can administrators determine whether their installed kernel includes the fix?

The data does not provide fixed package or kernel versions. Administrators will need to consult their Debian kernel package changelog or the referenced Debian security-tracker entry for version-specific fix status.

DEBIAN-CVE-2026-99162: Use After Free

Affected Software

Remediation

Event History

Frequently Asked Questions

What condition is required for this use-after-free to occur?

Which systems are in scope based on the available information?

How can administrators determine whether their installed kernel includes the fix?

Company

Resources

Contact

Frequently Asked Questions

What condition is required for this use-after-free to occur?

Which systems are in scope based on the available information?

How can administrators determine whether their installed kernel includes the fix?