CVE-2026-92482 pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip
A use-after-free in the MediaTek pinctrl driver allows local attackers with module loading privileges to execute arbitrary code or escalate privileges.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-92482?
CVE-2026-92482 is an use after free vulnerability in Linux, published on 17 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip
The gpio_chip is allocated with device-managed memory but registered with the non-managed gpiochip_add_data(). This was harmless while the drivers were built-in, but once they can be built as modules and unbound/rmmod'd, devm frees the gpio_chip's memory while it is still registered, causing a use-after-free.
Register it with devm_gpiochip_add_data() so it shares the same device-managed lifecycle, which also lets the manual gpiochip_remove() error paths go away.
Which versions are affected by CVE-2026-92482?
How do I fix CVE-2026-92482?
Apply the vendor's patch.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2026-92482 being exploited?
There is no known exploitation of CVE-2026-92482 in the wild and no public exploit code.
Sources
Also known as AZL-110441, BELL-CVE-2026-92482, DEBIAN-CVE-2026-92482, GHSA-6wqp-4g53-5h3x, UBUNTU-CVE-2026-92482.