CVE-2026-64238
In the Linux kernel, the following vulnerability has been resolved: gpio: shared: fix deadlock on shared proxy's parent removal Commit 710abda58055 ("gpio: shared: call gpio_chip::of_xlate() if set") used the mutex embedded in struct gpio_shared_entry to protect the offset field which now can be modified after assignment. The critical section however is too wide and introduced a potential deadlock on the removal of the shared GPIO proxy's parent. Make the critical section shorter - only protect the offset when it's being read. While at it: mention the fact that the entry lock is now also used to protect against concurrent access to the offset field in the structure's documentation.
Affected versions
Linux kernel versions
6.19.12,
7.0
and later are affected. Fixed in
7.0.12,
7.1
and their respective stable series.
References
2 totalFrequently asked questions
-
What is CVE-2026-64238?
CVE-2026-64238 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.19.12 onward and has been patched in 7.0.12 and 7.1. CVE-2026-64238 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-64238?
Yes. CVE-2026-64238 has been patched. Fixed versions include 7.0.12 and 7.1. If you are running Linux kernel 6.19.12 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-64238 actively exploited?
No. CVE-2026-64238 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.