In the Linux kernel, the following vulnerability has been resolved: drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach When the Exynos… (CVE-2026-98605)

The vulnerability in the Linux kernel's drm/bridge samsung-dsim driver stemmed from an incorrect combination of GPIO descriptor management functions. The driver switched from gpiod_get_optional() to devm_gpiod_get_optional() but retained gpiod_put() calls, which is incorrect for managed descriptors. Dropping the puts while keeping the managed get was also incorrect because samsung_dsim_register_te_irq() is called during the DSI host attach callback, and host detach/reattach can occur without destroying the device. This could cause multiple acquisitions of the GPIO without proper release. The fix reverted to using the non-managed gpiod_get_optional() and maintained explicit gpiod_put() calls on error paths and unregister operations.

Improper management of GPIO descriptors could lead to resource leaks or conflicts during host detach and reattach cycles. This may affect the stability or reliability of the display subsystem on affected devices using the samsung-dsim driver. No direct exploitation or security impact details are provided.

A fix has been implemented in the Linux kernel source code to correct the GPIO descriptor management in the samsung-dsim driver. Users should update to the fixed kernel version once available. No additional mitigation steps are specified.