Skip to main content
CVE-2026-99049VulnerabilityPublished Updated

Microsoft · gpio: xilinx: fix runtime PM leak on request error path

Affects MicrosoftSource GCVE Database

0
Compare
Authoritative record:CVE-2026-99049· Low

Not known to be exploited · fixed in ff82fc3a4a1d417dee1229681cc5285986edb1fa : update Microsoft when convenient.

Data as of 7 Nov 2026, 12:33 UTC

Severity
Low

Rated by Threat Radar · CVSS not yet scored by NVD

Thin evidence

One scorer or none
Patch
Available – fixed in ff82fc3a4a1d417dee1229681cc5285986edb1fa, f73ee2bd2293f8cc340061c5229395ace71fc2eb, b07b3925f676640103b3d74b93fc401b1c873d13 +4

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 23 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 7 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 26b04774621ed333e8bc56479feb6e31625df58c, < ff82fc3a4a1d417dee1229681cc5285986edb1fa
Fixed in
  • ff82fc3a4a1d417dee1229681cc5285986edb1fa
LinuxLinuxAffected
  • ≥ 26b04774621ed333e8bc56479feb6e31625df58c, < f73ee2bd2293f8cc340061c5229395ace71fc2eb
Fixed in
  • f73ee2bd2293f8cc340061c5229395ace71fc2eb
LinuxLinuxAffected
  • ≥ 26b04774621ed333e8bc56479feb6e31625df58c, < b07b3925f676640103b3d74b93fc401b1c873d13
Fixed in
  • b07b3925f676640103b3d74b93fc401b1c873d13
LinuxLinuxAffected
  • ≥ 26b04774621ed333e8bc56479feb6e31625df58c, < a027e0d7765d1531ee39e4dae81951b04f32ba7b
Fixed in
  • a027e0d7765d1531ee39e4dae81951b04f32ba7b
LinuxLinuxAffected
  • ≥ 26b04774621ed333e8bc56479feb6e31625df58c, < 7fa0e73dc31f4e653918fc002d64909c83f4b020
Fixed in
  • 7fa0e73dc31f4e653918fc002d64909c83f4b020
LinuxLinuxAffected
  • ≥ 26b04774621ed333e8bc56479feb6e31625df58c, < 3c7c764a3e933b4b32a847edeb89c8d1930613f4
Fixed in
  • 3c7c764a3e933b4b32a847edeb89c8d1930613f4

Description

This vulnerability concerns a runtime power management (PM) resource leak in the Xilinx GPIO driver on error paths during request handling. It affects Microsoft products with versions 3.0 and 4.0. No CVSS score or detailed impact information is provided.

References

Community reviews

Loading reviews…