{
  "cveId": "CVE-2026-64022",
  "url": "https://patchblox.com/security/cve/CVE-2026-64022",
  "summary": "CVE-2026-64022 is fixed in linux on 1 platform by DEBIAN-CVE-2026-64022 (version 7.0.12-1), released July 20, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  gpio: aggregator: remove the software node when...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  gpio: aggregator: remove the software node when deactivating the aggregator  The dynamic software node we create for the aggregator platform device when using configfs is leaked when the device is deactivated. Destroy it as the last step in the tear-down path.",
  "published": "2026-07-19T16:17:42Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00121,
  "epssPercentile": 0.01909,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.0.12-1",
      "fix": "DEBIAN-CVE-2026-64022",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-64022",
      "released": "2026-07-20T12:58:36Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}