CVE-2026-64022

medium

Description

In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: remove the software node when deactivating the aggregator The dynamic software node we create for the aggregator platform device when using configfs is leaked when the device is deactivated. Destroy it as the last step in the tear-down path.

References

https://git.kernel.org/stable/c/9870ea9a4a25abef3e7af3445bfce2472528a546

https://git.kernel.org/stable/c/61fef83f239ecace1cce716135762a2d9b7b1fc6

https://git.kernel.org/stable/c/3e657619cf7258cb53b1beaf0d02998297695cde

Details

Source: Mitre, NVD

Published: 2026-07-19

Updated: 2026-07-19

Risk Information

CVSS v2

Base Score: 5.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity: Medium

EPSS

EPSS: 0.00166