CVE-2026-43138
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
06/05/2026
Last modified:
06/05/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
reset: gpio: suppress bind attributes in sysfs<br />
<br />
This is a special device that&#39;s created dynamically and is supposed to<br />
stay in memory forever. We also currently don&#39;t have a devlink between<br />
it and the actual reset consumer. Suppress sysfs bind attributes so that<br />
user-space can&#39;t unbind the device because - as of now - it will cause a<br />
use-after-free splat from any user that puts the reset control handle.



