Wind River Support Network

HomeDefectsLIN1024-36516

Fixed

LIN1024-36516 : Security Advisory - linux - CVE-2026-99257

Created: Nov 3, 2026 Updated: Nov 5, 2026

Resolved Date: Nov 3, 2026

Found In Version: 10.24.33.2

Fix Version: 10.24.33.5

Severity: Standard

Applicable for: Wind River Linux LTS 24

Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:  gpio: shared: gracefully handle no-device lookup of shared GPIOs  We use platform lookup tables for shared GPIOs. This mechanism needs a struct device to work so fwnode-based lookup with no device associated currently causes a NULL-pointer deference.  Adding this functionality will require a larger rework and it has never worked anyway so add a check that allows the kernel to gracefully handle this situation with an error ahead of implementing that functionality as a new feature.
Data source: kernel.org (416baaa9-dc9f-4396-8d5f-8c081fb06d67)