CVE-2026-98971

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98971", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.383Z", "datePublished": "2026-10-23T12:19:44.536Z", "dateUpdated": "2026-10-30T12:40:37.940Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-30T12:40:37.940Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: exar: initialize the ID before registering its cleanup\n\ndevm_add_action_or_reset() invokes the cleanup action immediately when\nregistering the action fails. gpio_exar_probe() currently stores the\nallocated ID in exar_gpio only after registering the action, so that\nfailure makes exar_devm_ida_free() release ID 0. If the allocated ID is\nnonzero, this leaks that ID and can free ID 0 belonging to another device.\n\nStore the ID before registering the cleanup action so both the immediate\nfailure path and normal device teardown release the correct allocation."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpio/gpio-exar.c"], "versions": [{"version": "5300ebb695fa0672589ab191062392f686fca75d", "lessThan": "0250acba81654b2ee50bde324ad72b3f0c04d0bd", "status": "affected", "versionType": "git"}, {"version": "5300ebb695fa0672589ab191062392f686fca75d", "lessThan": "88b9c4bbf83d940ab672956e5af921215905dcb4", "status": "affected", "versionType": "git"}, {"version": "5300ebb695fa0672589ab191062392f686fca75d", "lessThan": "bf3d841ef12fcbec4458e2750956b738b043a226", "status": "affected", "versionType": "git"}, {"version": "5300ebb695fa0672589ab191062392f686fca75d", "lessThan": "b78c114600ae3df90c083c72c290437b068577c8", "status": "affected", "versionType": "git"}, {"version": "5300ebb695fa0672589ab191062392f686fca75d", "lessThan": "01318927a9055136c207399eeb36ce07becac179", "status": "affected", "versionType": "git"}, {"version": "5300ebb695fa0672589ab191062392f686fca75d", "lessThan": "f7ec4dbd2a073dd53b6349be1c586fe8580dd6b2", "status": "affected", "versionType": "git"}, {"version": "5300ebb695fa0672589ab191062392f686fca75d", "lessThan": "4d69e74034b208588636ecc177e0dd43a7696af3", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpio/gpio-exar.c"], "versions": [{"version": "5.11", "status": "affected"}, {"version": "0", "lessThan": "5.11", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.224", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.191", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.160", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.113", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.57", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.11", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.11", "versionEndExcluding": "5.15.224"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.11", "versionEndExcluding": "6.1.191"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.11", "versionEndExcluding": "6.6.160"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.11", "versionEndExcluding": "6.12.113"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.11", "versionEndExcluding": "6.18.57"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.11", "versionEndExcluding": "7.2.11"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.11", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/0250acba81654b2ee50bde324ad72b3f0c04d0bd"}, {"url": "https://git.kernel.org/stable/c/88b9c4bbf83d940ab672956e5af921215905dcb4"}, {"url": "https://git.kernel.org/stable/c/bf3d841ef12fcbec4458e2750956b738b043a226"}, {"url": "https://git.kernel.org/stable/c/b78c114600ae3df90c083c72c290437b068577c8"}, {"url": "https://git.kernel.org/stable/c/01318927a9055136c207399eeb36ce07becac179"}, {"url": "https://git.kernel.org/stable/c/f7ec4dbd2a073dd53b6349be1c586fe8580dd6b2"}, {"url": "https://git.kernel.org/stable/c/4d69e74034b208588636ecc177e0dd43a7696af3"}], "title": "gpio: exar: initialize the ID before registering its cleanup", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/gpio/gpio-exar.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "0250acba81654b2ee50bde324ad72b3f0c04d0bd", "status": "affected", "version": "5300ebb695fa0672589ab191062392f686fca75d", "versionType": "git"}, {"lessThan": "88b9c4bbf83d940ab672956e5af921215905dcb4", "status": "affected", "version": "5300ebb695fa0672589ab191062392f686fca75d", "versionType": "git"}, {"lessThan": "bf3d841ef12fcbec4458e2750956b738b043a226", "status": "affected", "version": "5300ebb695fa0672589ab191062392f686fca75d", "versionType": "git"}, {"lessThan": "b78c114600ae3df90c083c72c290437b068577c8", "status": "affected", "version": "5300ebb695fa0672589ab191062392f686fca75d", "versionType": "git"}, {"lessThan": "01318927a9055136c207399eeb36ce07becac179", "status": "affected", "version": "5300ebb695fa0672589ab191062392f686fca75d", "versionType": "git"}, {"lessThan": "f7ec4dbd2a073dd53b6349be1c586fe8580dd6b2", "status": "affected", "version": "5300ebb695fa0672589ab191062392f686fca75d", "versionType": "git"}, {"lessThan": "4d69e74034b208588636ecc177e0dd43a7696af3", "status": "affected", "version": "5300ebb695fa0672589ab191062392f686fca75d", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/gpio/gpio-exar.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.11"}, {"lessThan": "5.11", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.224", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.191", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.160", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.113", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.57", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.11", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: exar: initialize the ID before registering its cleanup\n\ndevm_add_action_or_reset() invokes the cleanup action immediately when\nregistering the action fails. gpio_exar_probe() currently stores the\nallocated ID in exar_gpio only after registering the action, so that\nfailure makes exar_devm_ida_free() release ID 0. If the allocated ID is\nnonzero, this leaks that ID and can free ID 0 belonging to another device.\n\nStore the ID before registering the cleanup action so both the immediate\nfailure path and normal device teardown release the correct allocation."}], "id": "CVE-2026-98971", "lastModified": "2026-10-30T13:21:33.613", "metrics": {}, "published": "2026-10-23T13:17:18.673", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/01318927a9055136c207399eeb36ce07becac179"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/0250acba81654b2ee50bde324ad72b3f0c04d0bd"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/4d69e74034b208588636ecc177e0dd43a7696af3"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/88b9c4bbf83d940ab672956e5af921215905dcb4"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/b78c114600ae3df90c083c72c290437b068577c8"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/bf3d841ef12fcbec4458e2750956b738b043a226"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f7ec4dbd2a073dd53b6349be1c586fe8580dd6b2"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: gpio: exar: initialize the ID before registering its cleanup", "id": "2559687", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2559687"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.1", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-826", "details": ["In the Linux kernel, the following vulnerability has been resolved:\ngpio: exar: initialize the ID before registering its cleanup\ndevm_add_action_or_reset() invokes the cleanup action immediately when\nregistering the action fails. gpio_exar_probe() currently stores the\nallocated ID in exar_gpio only after registering the action, so that\nfailure makes exar_devm_ida_free() release ID 0. If the allocated ID is\nnonzero, this leaks that ID and can free ID 0 belonging to another device.\nStore the ID before registering the cleanup action so both the immediate\nfailure path and normal device teardown release the correct allocation.", "A flaw was found in the Linux kernel's Exar GPIO (General Purpose Input/Output) driver. A local user could cause a Denial of Service (DoS) when device initialization error handling triggers cleanup before the newly allocated device identifier is saved. Because the identifier is not yet stored, the driver erroneously releases identifier zero, potentially freeing a resource belonging to another active device and leading to system instability."], "name": "CVE-2026-98971", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-23T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-98971\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-98971\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98971.mbox"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[5300ebb695fa0672589ab191062392f686fca75d,bf3d841ef12fcbec4458e2750956b738b043a226)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[5300ebb695fa0672589ab191062392f686fca75d,b78c114600ae3df90c083c72c290437b068577c8)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[5300ebb695fa0672589ab191062392f686fca75d,01318927a9055136c207399eeb36ce07becac179)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[5300ebb695fa0672589ab191062392f686fca75d,f7ec4dbd2a073dd53b6349be1c586fe8580dd6b2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[5300ebb695fa0672589ab191062392f686fca75d,4d69e74034b208588636ecc177e0dd43a7696af3)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "5.11"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,5.11)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.160,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.113,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.57,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.11,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[5300ebb695fa0672589ab191062392f686fca75d,bf3d841ef12fcbec4458e2750956b738b043a226)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[5300ebb695fa0672589ab191062392f686fca75d,b78c114600ae3df90c083c72c290437b068577c8)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[5300ebb695fa0672589ab191062392f686fca75d,01318927a9055136c207399eeb36ce07becac179)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[5300ebb695fa0672589ab191062392f686fca75d,f7ec4dbd2a073dd53b6349be1c586fe8580dd6b2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[5300ebb695fa0672589ab191062392f686fca75d,4d69e74034b208588636ecc177e0dd43a7696af3)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "5.11"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,5.11)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.160,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.113,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.57,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.11,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-10-23T17:00:15.617666+00:00", "updated": "2026-10-29T22:45:03.523520+00:00", "vendors": ["linux", "linux$PRODUCT$linux", "linux$PRODUCT$linux_kernel"]}