CVE-2026-98971

In the Linux kernel, the following vulnerability has been resolved:

gpio: exar: initialize the ID before registering its cleanup

devm add action or reset() invokes the cleanup action immediately when registering the action fails. gpio exar probe() currently stores the allocated ID in exar gpio only after registering the action, so that failure makes exar devm ida free() release ID 0. If the allocated ID is nonzero, this leaks that ID and can free ID 0 belonging to another device.

Store the ID before registering the cleanup action so both the immediate failure path and normal device teardown release the correct allocation.