UNKNOWNCVSS not yet scoredVulnerability

CVE-2026-98528

In the Linux kernel, the following vulnerability has been resolved: gpio: cdev: fix kernel stack leak to user-space in error path If we fail to acquire the GPIO chip guard in gpio_desc_to_lineinfo(), we return immediately before zeroing the info struct we'll end up passing to the user-space later in lineinfo_get_v1(). This may leak the kernel stack contents. Make gpio_desc_to_lineinfo() return int so that the -ENODEV returned on failure to acquire the guard can be propagated to the callers. While not strictly necessary: move the memset() before trying to acquire the SRCU read lock too for good measure.

Properties

Last source
FIRST EPSS
Nvd fetched at
2026-10-20T21:14:08.448323+00:00
Epss score
0.00209
Cve id
CVE-2026-98528
First seen by Signal
2026-10-18T18:05:58+00:00
Retrieved at
2026-10-21T01:24:51+00:00
Published at
2026-10-18T16:17:04.303
Last modified
2026-10-19T10:19:08.137
Epss percentile
0.1041

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-98528 — Ninja Signal Threat Intelligence | Ninja Signal