---
id: CVE-2026-99257
title: 'gpio: shared: gracefully handle no-device lookup of shared GPIOs'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  gpio: shared: gracefully handle no-device lookup of shared GPIOs

  We use platform lookup tables for shared GPIOs. This mechanism needs a
  struct device to work so fwnode…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= a060b8c511abb0997381b397e52149a5e3e5259a <
    7f9eb6aaf9a3ab7fa2b7dcc38660c27db12d4ec1
  - >-
    Linux >= a060b8c511abb0997381b397e52149a5e3e5259a <
    cf73c3fc03c43a8a86fd487c62390b4744eff9ec
  - Linux 6.19
published: '2026-11-03'
updated: '2026-11-03'
sourceUpdated: '2026-11-03T11:40:45.753Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-99257'
references:
  - url: 'https://git.kernel.org/stable/c/7f9eb6aaf9a3ab7fa2b7dcc38660c27db12d4ec1'
  - url: 'https://git.kernel.org/stable/c/cf73c3fc03c43a8a86fd487c62390b4744eff9ec'
tags:
  - cve.org
epss: 0.00177
epssPercentile: 0.07362
ingestedAt: '2026-11-05T19:30:42.938Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

gpio: shared: gracefully handle no-device lookup of shared GPIOs

We use platform lookup tables for shared GPIOs. This mechanism needs a
struct device to work so fwnode-based lookup with no device associated
currently causes a NULL-pointer deference.

Adding this functionality will require a larger rework and it has never
worked anyway so add a check that allows the kernel to gracefully handle
this situation with an error ahead of implementing that functionality as
a new feature.

## Affected

- `Linux >= a060b8c511abb0997381b397e52149a5e3e5259a < 7f9eb6aaf9a3ab7fa2b7dcc38660c27db12d4ec1`
- `Linux >= a060b8c511abb0997381b397e52149a5e3e5259a < cf73c3fc03c43a8a86fd487c62390b4744eff9ec`
- `Linux 6.19`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.