The Linux kernel's gpiolib subsystem contained a vulnerability where failure of memory allocation in the gpiolib_seq_start() function left the s->private pointer uninitialized. Subsequent dereferencing of this pointer in gpiolib_seq_stop() without a null check could cause invalid pointer access. This flaw was fixed by initializing s->private to NULL before calling kzalloc() and adding a check before dereferencing it, preventing potential kernel crashes or other severe impacts.

Successful exploitation of this vulnerability could lead to kernel crashes or other severe impacts affecting confidentiality, integrity, and availability of the system, as indicated by the CVSS vector (C:H/I:H/A:H). No known exploits are reported in the wild at this time.

A fix for this vulnerability has been implemented in the Linux kernel by initializing the s->private pointer to NULL before memory allocation and checking it before dereference. Users should apply the official kernel updates that include this fix once available. Patch status is not yet confirmed in the provided data; check the vendor advisory for current remediation guidance.