CVE-2026-64238

Source
https://cve.org/CVERecord?id=CVE-2026-64238
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64238.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-64238
Downstream
Published
2026-07-24T15:27:42Z
Modified
2026-10-08T02:48:23Z
Summary
gpio: shared: fix deadlock on shared proxy's parent removal
Details

In the Linux kernel, the following vulnerability has been resolved:

gpio: shared: fix deadlock on shared proxy's parent removal

Commit 710abda58055 ("gpio: shared: call gpio_chip::of_xlate() if set") used the mutex embedded in struct gpio_shared_entry to protect the offset field which now can be modified after assignment. The critical section however is too wide and introduced a potential deadlock on the removal of the shared GPIO proxy's parent.

Make the critical section shorter - only protect the offset when it's being read.

While at it: mention the fact that the entry lock is now also used to protect against concurrent access to the offset field in the structure's documentation.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64238.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
710abda58055ed5eaa8958107633cc12a365c328
Fixed
a554dfcd30dd5e41d1d67387b3bb85cea83e12e1
Fixed
a1b836607304f71051f9f9dcccf8b5097b86a1fb
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.19.12
Fixed
6.20
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
28f488e7b327630686378bb1d24e22cfc3fc162d

Affected versions

v6.*
v6.19.12
v6.19.13
v6.19.14

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64238.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
7.0.0
Fixed
7.0.12

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64238.json"