Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43138

In the Linux kernel, the following vulnerability has been resolved: reset: gpio: suppress bind attributes in sysfs This is a special device that's created dynamically and is supposed to stay in memory forever. We also currently don't have a devlink between it and the actual reset consumer. Suppress sysfs bind attributes so that user-space can't unbind the device because - as of now - it will cause a use-after-free splat from any user that puts the reset control handle.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:9a15531db1a20f1f0a26b8e1f28c66922416d198bd8197ad1b1bd663a44aec32
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/reset/reset-gpio.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"09d6efc6abd42809956d598906c222ccd1c8ae92","status":"affected","version":"cee544a40e4426040946e685988b1489f13e6600","versionType":"git"},{"lessThan":"76801c3dfca0ac6339a23e9615b5f23e25b8644c","status":"affected","version":"cee544a40e4426040946e685988b1489f13e6600","versionType":"git"},{"lessThan":"1d7d869f074f98c34fe23f6a56e5f3acc1f95a2b","status":"affected","version":"cee544a40e442604094…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:635781d0ffda6837ff0f52186c9904ff79e31115199855f14132c400c5c2786f · sha256:a3d6cb77d8fd6c28… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/reset/reset-gpio.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.9"},{"lessThan":"6.9","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.75","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.16","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.6","versionType":"semver"},{"lessTh…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:635781d0ffda6837ff0f52186c9904ff79e31115199855f14132c400c5c2786f · sha256:a3d6cb77d8fd6c28… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/reset/reset-gpio.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"09d6efc6abd42809956d598906c222ccd1c8ae92","status":"affected","version":"cee544a40e4426040946e685988b1489f13e6600","versionType":"git"},{"lessThan":"76801c3dfca0ac6339a23e9615b5f23e25b8644c","status":"affected","version":"cee544a40e4426040946e685988b1489f13e6600","versionType":"git"},{"lessThan":"1d7d869f074f98c34fe23f6a56e5f3acc1f95a2b","status":"affected","version":"cee544a40e442604094…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:635781d0ffda6837ff0f52186c9904ff79e31115199855f14132c400c5c2786f · sha256:a3d6cb77d8fd6c28… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/reset/reset-gpio.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.9"},{"lessThan":"6.9","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.75","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.16","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.6","versionType":"semver"},{"lessTh…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:635781d0ffda6837ff0f52186c9904ff79e31115199855f14132c400c5c2786f · sha256:a3d6cb77d8fd6c28… · /containers/cna/affected/1

Source references

4 source assertions
{"url":"https://git.kernel.org/stable/c/09d6efc6abd42809956d598906c222ccd1c8ae92"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:635781d0ffda6837ff0f52186c9904ff79e31115199855f14132c400c5c2786f · sha256:a3d6cb77d8fd6c28… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/16de4c6a8fe9ff497ca1aba33ef0dbee09f11952"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:635781d0ffda6837ff0f52186c9904ff79e31115199855f14132c400c5c2786f · sha256:a3d6cb77d8fd6c28… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/1d7d869f074f98c34fe23f6a56e5f3acc1f95a2b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:635781d0ffda6837ff0f52186c9904ff79e31115199855f14132c400c5c2786f · sha256:a3d6cb77d8fd6c28… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/76801c3dfca0ac6339a23e9615b5f23e25b8644c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:635781d0ffda6837ff0f52186c9904ff79e31115199855f14132c400c5c2786f · sha256:a3d6cb77d8fd6c28… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer