CVE-2026-99257

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-11-03 Modified: 2026-11-03 First seen: 2026-11-03 Status: pending_score

Description

In the Linux kernel, the following vulnerability has been resolved: gpio: shared: gracefully handle no-device lookup of shared GPIOs We use platform lookup tables for shared GPIOs. This mechanism needs a struct device to work so fwnode-based lookup with no device associated currently causes a NULL-pointer deference. Adding this functionality will require a larger rework and it has never worked anyway so add a check that allows the kernel to gracefully handle this situation with an error ahead of implementing that functionality as a new feature.

Affected Software (6)

VendorProductVersion
Linux Linux a060b8c511abb0997381b397e52149a5e3e5259a < 7f9eb6aaf9a3ab7fa2b7dcc38660c27db12d4ec1
Linux Linux a060b8c511abb0997381b397e52149a5e3e5259a < cf73c3fc03c43a8a86fd487c62390b4744eff9ec
Linux Linux 6.19
Linux Linux a060b8c511abb0997381b397e52149a5e3e5259a < 7f9eb6aaf9a3ab7fa2b7dcc38660c27db12d4ec1
Linux Linux a060b8c511abb0997381b397e52149a5e3e5259a < cf73c3fc03c43a8a86fd487c62390b4744eff9ec
Linux Linux 6.19

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.18%
Raw Score 0.001770
Percentile 7.4%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00177
2026-11-13
0.00177
2026-11-12
0.00177
2026-11-10
0.00177
2026-11-09
0.00177
2026-11-08
0.00177
2026-11-07
0.00177
2026-11-06
0.00177
2026-11-05
0.00177
2026-11-04
0.00177

Intelligence Sources

mitre ref →
nvd ref →