drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach
Summary
| CVE | CVE-2026-98605 |
| State | PUBLISHED |
| Assigner | Linux |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-10-18 16:17:13 UTC |
| Updated | 2026-10-19 10:19:22 UTC |
| Description | In the Linux kernel, the following vulnerability has been resolved:
drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach
When the Exynos DSI driver was generalized into samsung-dsim, the TE
GPIO acquisition was switched from gpiod_get_optional() to
devm_gpiod_get_optional() while keeping the matching gpiod_put() calls.
That combination is wrong for a managed descriptor.
However, dropping the puts and keeping the managed get is also wrong:
samsung_dsim_register_te_irq() runs from the DSI host attach callback,
and host detach/reattach can happen without destroying the device that
owns the managed action. A second attach would then request the GPIO
again without having released it.
Switch back to a non-managed gpiod_get_optional() and keep the explicit
gpiod_put() on the request_irq() error path and in
samsung_dsim_unregister_te_irq().
[Luca: remove unnecessary comment] |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|
| CNA |
Linux |
Linux |
affected e7447128ca4a250374d6721ee98e3e3cf99551a6 77a43e00c57486a5212ef22d4665cafad62a5d4b git |
Not specified |
| CNA |
Linux |
Linux |
affected e7447128ca4a250374d6721ee98e3e3cf99551a6 5759bbef951c39d264ac0f47daa4137d01403aea git |
Not specified |
| CNA |
Linux |
Linux |
affected e7447128ca4a250374d6721ee98e3e3cf99551a6 ebffd70e4877bb7554974cf975a27872f2bb225f git |
Not specified |
| CNA |
Linux |
Linux |
affected e7447128ca4a250374d6721ee98e3e3cf99551a6 9b796251c3cca45a33a5c859c6818c58aa982277 git |
Not specified |
| CNA |
Linux |
Linux |
affected e7447128ca4a250374d6721ee98e3e3cf99551a6 ada667890773e033d2f40dc94176e3beb930b516 git |
Not specified |
| CNA |
Linux |
Linux |
affected 6.4 |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.4 semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.6.158 6.6.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.12.112 6.12.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.18.55 6.18.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 7.2.9 7.2.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 7.3 * original_commit_for_fix |
Not specified |
References
| Reference | Source | Link | Tags |
|---|
| git.kernel.org/stable/c/5759bbef951c39d264ac0f47daa4137d01403aea |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/77a43e00c57486a5212ef22d4665cafad62a5d4b |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/9b796251c3cca45a33a5c859c6818c58aa982277 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/ada667890773e033d2f40dc94176e3beb930b516 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/ebffd70e4877bb7554974cf975a27872f2bb225f |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.