CVE-2026-64022

In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: remove the software node when deactivating the aggregator The dynamic software node we create for the aggregator platform device when using configfs is leaked when the device is deactivated. Destroy it as the last step in the tear-down path.

CVSS 3.1

5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-25)

CWE

CWE-401

Published

2026-07-19

Modified

2026-10-13

Record from

the NVD, synced 2026-10-19

Affected

• linux:linux_kernel

References

• https://git.kernel.org/stable/c/3e657619cf7258cb53b1beaf0d02998297695cde
• https://git.kernel.org/stable/c/61fef83f239ecace1cce716135762a2d9b7b1fc6
• https://git.kernel.org/stable/c/9870ea9a4a25abef3e7af3445bfce2472528a546

Check your stackJSON