VULNERABILITY INTELLIGENCE
CVE-2026-64022
CVSS score5.5 MEDIUM
EPSS probability0.12%
CISA KEVNot currently listed
Published2026-07-19
Last modified2026-10-13
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: remove the software node when deactivating the aggregator The dynamic software node we create for the aggregator platform device when using configfs is leaked when the device is deactivated. Destroy it as the last step in the tear-down path.
Weakness classification
- CWE-401: Missing Release of Memory after Effective Lifetime