CVE-2026-22986 | Linux Kernel up to 6.18.5/6.19-rc4 gpiochip_add_data_with_key gdev initialization

A vulnerability described as critical has been identified in Linux Kernel up to 6.18.5/6.19-rc4. This affects the function gpiochip_add_data_with_key. Executing a manipulation of the argument gdev can lead to improper initialization.

This vulnerability is tracked as CVE-2026-22986. The attack is only possible within the local network. No exploit exists.

Upgrading the affected component is recommended.