CVE-2026-80563

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the sloppy-logic-analyzer component of the Linux kernel. The trigger write() function dereferences the gpio la poll priv object without taking a debugfs reference. Because the file is created using debugfs create file unsafe(), the debugfs remove recursive() function in gpio la poll remove() does not wait for active write operations to complete before the platform device is unbound and the memory is freed via devm kzalloc(). This creates a race condition where a write operation can occur in freed memory. This state is reachable by the root user via the /sys/bus/platform/drivers/gpio-sloppy-logic-analyzer/unbind endpoint.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.