Is there a patch available for EUVD-2026-103574?

Yes, a patch is available for EUVD-2026-103574. Update the affected software to the latest version immediately.

Linux EUVD-2026-103574

| CVE-2026-98529

2026-10-18 Linux

GHSA-42qh-8w7w-426q

Information Disclosure Linux

View

Monitor Track and reassess. Why: No CVSS yet + weak signal (CWE or non-zero EPSS).

Patch available 0.2% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisCVE.org

In the Linux kernel, the following vulnerability has been resolved:

gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()

Switching a persistent GPIO line from input to output acquires a runtime PM reference on the parent device, but if the subsequent regmap_update_bits() fails the reference is never dropped and no later direction_in() can balance it since the direction was never changed. Drop the reference on the update failure path.

Affected VersionsENISA

Linux patch: 6.18.55

Linux patch: 5.15.222

Linux 27a49ed17e2245cacbdea88ad78b8494653e0338 <40c010c1866382cb63ba7497d6ec74fcc60ab9cf

Linux 27a49ed17e2245cacbdea88ad78b8494653e0338 <e9d810279f84b30738f7790c0ed15f8dd5b9024a

Linux 27a49ed17e2245cacbdea88ad78b8494653e0338 <5c8e87f33b68557a725e72f34051299f55c6fa9e

Linux patch: 7.3-rc5

Linux 27a49ed17e2245cacbdea88ad78b8494653e0338 <61ed58b745c1186006b8357da651abbb7a6bff17

Linux patch: 5.10.271

Linux 27a49ed17e2245cacbdea88ad78b8494653e0338 <9ee200f484983b0a178c593e57d2fe3e67061ee8

Linux patch: 6.12.112

Linux patch: 6.1.189

Linux 27a49ed17e2245cacbdea88ad78b8494653e0338 <9d8d6cddcb7c0b8125f3a9e52492e929674009d8

Linux patch: 7.2.9

Linux 27a49ed17e2245cacbdea88ad78b8494653e0338 <39748357db26b20a02ea2a25ce48943e6c6d6286

Linux patch: 6.6.158

Linux 4.13

Linux patch: 0

Linux 27a49ed17e2245cacbdea88ad78b8494653e0338 <a9f738487c11fb512dadef097b56020239c21810

Affected Packages

euvd linux no fix

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Know when the next one hits your stack

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Lifecycle Timeline

Patch available

Oct 18, 2026 - 16:02 EUVD

CVE Published

Oct 18, 2026 - 15:17 cve.org

UNKNOWN (no severity yet)

Threat Intelligence Overview

EPSS Score

0.2%

Top 88% exploitable

Data Quality

3 sources

Confidence: Low

EUVD

CVE.org

EPSS MSRC

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity Not scored yet

CISA KEV No

Public POC No

EPSS 0.2%

Patch available Yes

Active threat No

Deciding rule

No CVSS yet + weak signal (CWE or non-zero EPSS)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

Attack Technique

Information Disclosure MEDIUM

Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.