CVE-2026-43181

gpio: sysfs: fix chip removal with GPIOs exported over sysfs

published May 6, 2026

CVSS
—
EPSS
0%
Percentile
4.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

gpio: sysfs: fix chip removal with GPIOs exported over sysfs

Currently if we export a GPIO over sysfs and unbind the parent GPIO

controller, the exported attribute will remain under /sys/class/gpio

because once we remove the parent device, we can no longer associate the

descriptor with it in gpiod_unexport() and never drop the final

reference.

Rework the teardown code: provide an unlocked variant of

gpiod_unexport() and remove all exported GPIOs with the sysfs_lock taken

before unregistering the parent device itself. This is done to prevent

any new exports happening before we unregister the device completely.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00160 · 4.8th percentile
Published
2026-05-06T11:27Z
EPSS history
Timeline
  • 06 MAY 11:27Z
    gpio: sysfs: fix chip removal with GPIOs exported over sysfs
    cvelistv5