UBUNTU-CVE-2026-99162: Use After Free
In the Linux kernel, the following vulnerability has been resolved: gpio: shared: fix use-after-free bug when adding shared proxies The GPIO lookup table can stay alive for longer than the kobject whose name string's address we're assigning to lookup->devid. Fix a potential UAF by duplicating the string.
Event History
Frequently Asked Questions
What conditions are required to trigger this use-after-free?
The issue involves adding shared GPIO proxies where a GPIO lookup table outlives the kobject whose name string is assigned to the lookup table's dev_id field. Exploitation requires reaching that shared-proxy and lookup-table lifetime condition.
What is the immediate mitigation if an update cannot be applied?
The provided information does not identify a configuration workaround. Reducing or avoiding use of shared GPIO proxies may reduce exposure where operationally feasible, but no validated mitigation is specified.