CVE-2026-64238
Medium · 5.5CVSS
5.5
EPSS
0.1%
Published
Jul 24, 2026
CISA due date
—
The record
In the Linux kernel, the following vulnerability has been resolved: gpio: shared: fix deadlock on shared proxy's parent removal Commit 710abda58055 ("gpio: shared: call gpio_chip::of_xlate() if set") used the mutex embedded in struct gpio_shared_entry to protect the offset field which now can be modified after assignment. The critical section however is too wide and introduced a potential deadlock on the removal of the shared GPIO proxy's parent. Make the critical section shorter - only protect the offset when it's being read. While at it: mention the fact that the entry lock is now also used to protect against concurrent access to the offset field in the structure's documentation.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-98123 In the Linux kernel, the following vulnerability has been resolved: sctp: fix soft lockup… CWE-667
- CVE-2026-45404 OpenTelemetry-Go is the Go implementation of OpenTelemetry. CWE-667
- CVE-2026-64429 In the Linux kernel, the following vulnerability has been resolved: gpio: eic-sprd: use… CWE-667
- CVE-2026-64415 In the Linux kernel, the following vulnerability has been resolved: mm/swap: add… CWE-667
- CVE-2026-64347 In the Linux kernel, the following vulnerability has been resolved: usb: gadget… CWE-667
- CVE-2026-64334 In the Linux kernel, the following vulnerability has been resolved: USB: serial… CWE-667
- CVE-2026-64171 In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: fix… CWE-667
- CVE-2026-64062 In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential… CWE-667