Unrated severityNVD Advisory· Published Jul 19, 2026· Updated Jul 30, 2026

CVE-2026-64022

Description

In the Linux kernel, the following vulnerability has been resolved:

gpio: aggregator: remove the software node when deactivating the aggregator

The dynamic software node we create for the aggregator platform device when using configfs is leaked when the device is deactivated. Destroy it as the last step in the tear-down path.

Affected products

Linux/Kernelllm-fuzzy
osv-coords
pkg:linux/kernel
Range: >= 6.16.0, < 6.18.34

Patches

Vulnerability mechanics

References

git.kernel.org/stable/c/3e657619cf7258cb53b1beaf0d02998297695cdenvd
git.kernel.org/stable/c/61fef83f239ecace1cce716135762a2d9b7b1fc6nvd
git.kernel.org/stable/c/9870ea9a4a25abef3e7af3445bfce2472528a546nvd

News mentions

Linux Kernel: 25 Vulnerabilities Across Subsystems Disclosed Together
Vypr Intelligence · Jul 20, 2026

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000