{"id":"CVE-2026-99162","kind":"vulnerability","aliases":["CVE-2026-99162"],"related":[],"title":"Linux kernel GPIO shared-proxy use-after-free could corrupt memory","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: shared: fix use-after-free bug when adding shared proxies\n\nThe GPIO lookup table can stay alive for longer than the kobject whose\nname string's address we're assigning to lookup->dev_id. Fix a potential\nUAF by duplicating the string.","summary":"In the Linux kernel's GPIO shared-proxy code, a lookup table could keep a pointer to a kobject name string after that string was freed. The fix duplicates the string so the pointer stays valid, which prevents a use-after-free.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["embedded","gpio","infrastructure","linux-kernel","self-hosted"],"not_affected_if":["default-config"],"how_to_check":"- unknown","fix":"- Move to a Linux kernel release that includes the upstream gpio: shared fix (the sources do not name the version).","status":"open","published_at":"2026-10-28T11:17:36+00:00","first_seen_at":"2026-10-28T11:32:36+00:00","triaged_at":"2026-10-28T11:35:45+00:00","updated_at":"2026-10-28T11:35:45+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-10-28T11:35:45Z","model":"claude-haiku-5-5","output":{"fix":"- Move to a Linux kernel release that includes the upstream gpio: shared fix (the sources do not name the version).","reach":"local","title":"Linux kernel GPIO shared-proxy use-after-free could corrupt memory","impact":"medium","summary":"In the Linux kernel's GPIO shared-proxy code, a lookup table could keep a pointer to a kobject name string after that string was freed. The fix duplicates the string so the pointer stays valid, which prevents a use-after-free.","category":"infrastructure","nicknames":[],"who_cares":["linux-kernel","gpio","embedded","self-hosted"],"confidence":0.4,"needs_auth":"unknown","worst_case":"unknown; memory corruption in the kernel is possible","analyst_note":"Check the NVD entry and the upstream kernel commit for affected version ranges and whether an unprivileged user can trigger it.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":["default-config"],"who_is_affected":"Systems running a Linux kernel without the upstream gpio: shared fix that use shared GPIO proxies. The sources do not say which kernel versions or configurations are affected, so a team should check its kernel build against the upstream commit.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000567,"input_tokens":3324,"output_tokens":469,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':15A,18A '-99162':16A,19A 'add':92C 'address':111C 'aliv':101C 'assign':114C 'bug':90C 'code':38B 'corrupt':12A 'could':11A,42B 'cve':14A,17A 'dev':117C 'duplic':58B,124C 'embed':20B 'fix':57B,85C,119C 'follow':78C 'free':10A,72B,89C 'freed':55B 'gpio':3A,21B,34B,83C,96C 'host':28B 'id':118C 'infrastructur':22B 'keep':43B 'kernel':2A,25B,32B,76C 'kobject':48B,106C 'linux':1A,24B,31B,75C 'linux-kernel':23B 'longer':103C 'lookup':40B,97C,116C 'memori':13A 'name':49B,108C 'pointer':45B,63B 'potenti':121C 'prevent':67B 'proxi':6A,37B,94C 're':113C 'resolv':82C 'self':27B 'self-host':26B 'share':5A,36B,84C,93C 'shared-proxi':4A,35B 'stay':64B,100C 'string':50B,53B,60B,109C,126C 'tabl':41B,98C 'uaf':122C 'use':8A,70B,87C 'use-after-fre':7A,69B,86C 'valid':65B 'vulner':79C 'whose':107C","nicknames":[],"mitigations":[],"who_affected":"Systems running a Linux kernel without the upstream gpio: shared fix that use shared GPIO proxies. The sources do not say which kernel versions or configurations are affected, so a team should check its kernel build against the upstream commit.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T11:17:36+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-99162","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-99162","severity":null,"published_at":"2026-10-28T11:17:36+00:00","modified_at":"2026-10-28T11:17:36+00:00","first_seen_at":"2026-10-28T11:32:36+00:00","fetched_at":"2026-10-28T11:32:36+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}