The vulnerability in the Linux kernel gpio aggregator arises from improper cleanup order on error paths. Specifically, the device ID (dev_id) is freed before the corresponding lookup table entry is removed. If a concurrent thread calls gpiod_find() during this window, it may iterate over the lookup list and invoke gpiod_match_lookup_table(), which unconditionally dereferences the freed dev_id pointer via strcmp(). This use-after-free condition can cause kernel instability or crashes. The patch corrects this by reversing the cleanup order to ensure the lookup entry is removed before freeing dev_id.

This vulnerability can lead to use-after-free conditions in the Linux kernel, potentially causing kernel crashes or undefined behavior. There is no information about known exploits in the wild. The impact is limited to kernel stability and reliability issues rather than direct privilege escalation or data disclosure based on the provided data.

A fix for this vulnerability has been implemented in the Linux kernel by reversing the order of cleanup operations to prevent use-after-free. Users should apply the official kernel updates that include this fix once available. Patch status is not yet confirmed in the provided data; check the vendor or Linux kernel advisories for the current remediation guidance.