Skip to main content
VulnerabilityPublished

CVE-2026-98529: Linux kernel · gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()

Affects Linux kernelSource CVE Database V5

0

Not known to be exploited · fixed in e9d810279f84b30738f7790c0ed15f8dd5b9024a : update Linux kernel when convenient.

Data as of 26 Oct 2026, 14:05 UTC

Severity
Low

Rated Low by Threat Radar's AI analysis · CVSS not yet scored by NVD

EPSS
0.2% chance of exploitation in 30 days – higher than 12% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in e9d810279f84b30738f7790c0ed15f8dd5b9024a, a9f738487c11fb512dadef097b56020239c21810, 39748357db26b20a02ea2a25ce48943e6c6d6286 +5

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 18 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 27a49ed17e2245cacbdea88ad78b8494653e0338, < e9d810279f84b30738f7790c0ed15f8dd5b9024a
Fixed in
  • e9d810279f84b30738f7790c0ed15f8dd5b9024a
LinuxLinuxAffected
  • ≥ 27a49ed17e2245cacbdea88ad78b8494653e0338, < a9f738487c11fb512dadef097b56020239c21810
Fixed in
  • a9f738487c11fb512dadef097b56020239c21810
LinuxLinuxAffected
  • ≥ 27a49ed17e2245cacbdea88ad78b8494653e0338, < 39748357db26b20a02ea2a25ce48943e6c6d6286
Fixed in
  • 39748357db26b20a02ea2a25ce48943e6c6d6286
LinuxLinuxAffected
  • ≥ 27a49ed17e2245cacbdea88ad78b8494653e0338, < 61ed58b745c1186006b8357da651abbb7a6bff17
Fixed in
  • 61ed58b745c1186006b8357da651abbb7a6bff17
LinuxLinuxAffected
  • ≥ 27a49ed17e2245cacbdea88ad78b8494653e0338, < 40c010c1866382cb63ba7497d6ec74fcc60ab9cf
Fixed in
  • 40c010c1866382cb63ba7497d6ec74fcc60ab9cf
LinuxLinuxAffected
  • ≥ 27a49ed17e2245cacbdea88ad78b8494653e0338, < 9ee200f484983b0a178c593e57d2fe3e67061ee8
Fixed in
  • 9ee200f484983b0a178c593e57d2fe3e67061ee8

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

A fix is available in the Linux kernel commits identified by the provided fixedVersions hashes. Users should update to a kernel version that includes these fixes to resolve the runtime PM leak in the arizona GPIO driver.

Description

A runtime power management (PM) reference leak was fixed in the Linux kernel's arizona GPIO driver. The issue occurred when switching a persistent GPIO line from input to output, where a runtime PM reference was acquired but not released if a subsequent update operation failed. This could lead to resource leaks affecting power management.

References

Community reviews

Loading reviews…