What happened
In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: remove the software node when deactivating the aggregator The dynamic software node we create for the aggregator platform device when using configfs is leaked when the device is deactivated. Destroy it as the last step in the tear-down path.
Affected versions
Linux: 86f162e73d2d81ef6d819c06a3b6c2fda77a79b8 through before 3e657619cf7258cb53b1beaf0d02998297695cde (git); 86f162e73d2d81ef6d819c06a3b6c2fda77a79b8 through before 9870ea9a4a25abef3e7af3445bfce2472528a546 (git); 86f162e73d2d81ef6d819c06a3b6c2fda77a79b8 through before 61fef83f239ecace1cce716135762a2d9b7b1fc6 (git); 6.16 Fixed: See vendor advisory.
Why it matters
Review the vendor advisory and exposure of the affected product to determine operational impact.
Detection & mitigation
- Apply vendor-provided updates or mitigations.
- Review affected product exposure and access logs.
Public PoC references
No public PoC reference has passed the current publication threshold.