CVE-2026-43138

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the Linux kernel involving the gpio reset device. This special device is created dynamically and intended to remain in memory indefinitely. Due to the absence of a devlink between the device and the actual reset consumer, allowing user-space to unbind the device via sysfs bind attributes can lead to a use-after-free condition when a user utilizes the reset control handle.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.