Use-After-Free Vulnerability in Linux Kernel's GPIO Logic Analyzer Driver

CVE-2026-80563

What is CVE-2026-80563?

A use-after-free vulnerability exists in the GPIO logic analyzer driver within the Linux kernel's debugfs implementation. The handler for the 'trigger' debugfs file fails to maintain a reference during its execution, leading to potential access to freed memory. This vulnerability can be exploited by system administrators through the unbind operation, allowing them to write to deallocated memory during concurrent processing. A safer approach would be to implement a proper full_proxy wrapper around debugfs_create_file(), ensuring any in-flight writes are completed before proceeding with memory deallocations.

References