---
id: CVE-2026-99162
title: 'gpio: shared: fix use-after-free bug when adding shared proxies'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  gpio: shared: fix use-after-free bug when adding shared proxies

  The GPIO lookup table can stay alive for longer than the kobject whose
  name string's address we're assi…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= a060b8c511abb0997381b397e52149a5e3e5259a <
    8861491f8501516429e0e6c9d7a056480047227c
  - >-
    Linux >= a060b8c511abb0997381b397e52149a5e3e5259a <
    bd22f7e63509fa758cf500d9af3e88a3d3df96be
  - Linux 6.19
published: '2026-10-28'
updated: '2026-10-28'
sourceUpdated: '2026-10-28T10:35:14.755Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-99162'
references:
  - url: 'https://git.kernel.org/stable/c/8861491f8501516429e0e6c9d7a056480047227c'
  - url: 'https://git.kernel.org/stable/c/bd22f7e63509fa758cf500d9af3e88a3d3df96be'
tags:
  - cve.org
ingestedAt: '2026-10-28T11:09:40.394Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

gpio: shared: fix use-after-free bug when adding shared proxies

The GPIO lookup table can stay alive for longer than the kobject whose
name string's address we're assigning to lookup->dev_id. Fix a potential
UAF by duplicating the string.

## Affected

- `Linux >= a060b8c511abb0997381b397e52149a5e3e5259a < 8861491f8501516429e0e6c9d7a056480047227c`
- `Linux >= a060b8c511abb0997381b397e52149a5e3e5259a < bd22f7e63509fa758cf500d9af3e88a3d3df96be`
- `Linux 6.19`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.