Linux Kernel Vulnerability in GPIO Handling by Vendor

CVE-2026-64238

What is CVE-2026-64238?

The Linux kernel was affected by a vulnerability related to GPIO handling, specifically a deadlock condition arising from a mutex in the gpio_shared_entry structure. The issue was identified following a change in commit 710abda58055, where the critical section protecting the offset field extended too far, leading to potential deadlocks during the removal of shared GPIO proxies. The fix involves shortening the critical section to ensure that only the reading of the offset is protected, enhancing both stability and security. Additionally, documentation has been updated to indicate the entry lock's role in safeguarding concurrent access to the offset field.

References