{"id":"CVE-2026-99257","kind":"vulnerability","aliases":["CVE-2026-99257"],"related":[],"title":"Linux kernel: shared GPIO lookup without a device causes a NULL dereference","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: shared: gracefully handle no-device lookup of shared GPIOs\n\nWe use platform lookup tables for shared GPIOs. This mechanism needs a\nstruct device to work so fwnode-based lookup with no device associated\ncurrently causes a NULL-pointer deference.\n\nAdding this functionality will require a larger rework and it has never\nworked anyway so add a check that allows the kernel to gracefully handle\nthis situation with an error ahead of implementing that functionality as\na new feature.","summary":"A Linux kernel change fixes a NULL-pointer dereference when shared GPIOs are looked up by firmware node with no associated device. The fix makes the kernel return an error instead of crashing, and the sources do not describe any attacker-controlled path.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["gpio","linux-kernel","runtime"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-03T12:17:32+00:00","first_seen_at":"2026-11-03T12:20:39+00:00","triaged_at":"2026-11-03T12:22:50+00:00","updated_at":"2026-11-03T12:22:50+00:00","category":"runtime","confidence":0.4,"triage":{"at":"2026-11-03T12:22:50Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Linux kernel: shared GPIO lookup without a device causes a NULL dereference","impact":"low","summary":"A Linux kernel change fixes a NULL-pointer dereference when shared GPIOs are looked up by firmware node with no associated device. The fix makes the kernel return an error instead of crashing, and the sources do not describe any attacker-controlled path.","audience":"businesses","category":"runtime","nicknames":[],"who_cares":["linux-kernel","gpio"],"confidence":0.4,"fix_status":"unknown","needs_auth":"unknown","worst_case":"unknown","analyst_note":"Check the upstream kernel commit and the NVD entry for affected version ranges, the trigger conditions, and whether a crash or wider impact is possible.","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"The sources describe a kernel GPIO shared-lookup path reached when no struct device is associated with a fwnode-based lookup. They do not say which kernel versions, hardware, or configurations reach that path, or whether an unprivileged user can trigger it. unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000648,"input_tokens":4204,"output_tokens":455,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-99257':15A,18A 'add':122C,137C 'ahead':152C 'allow':141C 'anyway':135C 'associ':45B,114C 'attack':66B 'attacker-control':65B 'base':109C 'caus':9A,116C 'chang':27B 'check':139C 'control':67B 'crash':57B 'current':115C 'cve':13A,16A 'defer':121C 'derefer':12A,33B 'describ':63B 'devic':8A,46B,85C,103C,113C 'error':54B,151C 'featur':160C 'firmwar':41B 'fix':28B,48B 'follow':74C 'function':124C,156C 'fwnode':108C 'fwnode-bas':107C 'gpio':4A,19B,36B,79C,89C,97C 'grace':81C,145C 'handl':82C,146C 'implement':154C 'instead':55B 'kernel':2A,22B,26B,51B,72C,143C 'larger':128C 'linux':1A,21B,25B,71C 'linux-kernel':20B 'look':38B 'lookup':5A,86C,93C,110C 'make':49B 'mechan':99C 'need':100C 'never':133C 'new':159C 'no-devic':83C 'node':42B 'null':11A,31B,119C 'null-point':30B,118C 'path':68B 'platform':92C 'pointer':32B,120C 'requir':126C 'resolv':78C 'return':52B 'rework':129C 'runtim':23B 'share':3A,35B,80C,88C,96C 'situat':148C 'sourc':60B 'struct':102C 'tabl':94C 'use':91C 'vulner':75C 'without':6A 'work':105C,134C","nicknames":[],"mitigations":[],"who_affected":"The sources describe a kernel GPIO shared-lookup path reached when no struct device is associated with a fwnode-based lookup. They do not say which kernel versions, hardware, or configurations reach that path, or whether an unprivileged user can trigger it. unknown","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["gpio","linuxkernel","runtime","unknown"],"first_public_at":"2026-11-03T12:17:32+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-99257","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-99257","severity":null,"published_at":"2026-11-03T12:17:32+00:00","modified_at":"2026-11-03T12:17:32+00:00","first_seen_at":"2026-11-03T12:20:39+00:00","fetched_at":"2026-11-03T12:20:39+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}