Medium 5.5Published Apr 24, 2026

CVE-2026-31545NFC: nxp-nci: allow GPIOs to sleep

Updated under an hour ago (Oct 27, 2026, 12:30 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: NFC: nxp-nci: allow GPIOs to sleep Allow the firmware and enable GPIOs to sleep. This fixes a `WARN_ON' and allows the driver to operate GPIOs which are connected to I2C GPIO expanders. -- >8 -- kernel: WARNING: CPU: 3 PID: 2636 at drivers/gpio/gpiolib.c:3880 gpiod_set_value+0x88/0x98 -- >8 --

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	43201767b44cbd873c60dbd2acd370147588cb18 builds before 0c2320c3c860d281cbc2f49fc574c1947a6b9e2a; 43201767b44cbd873c60dbd2acd370147588cb18 builds before 2a175bc3c338c6b2bc55004e93dd35a2467bdca2; from 43201767b44cbd873c60dbd2acd370147588cb18 before c24dcac1a9d1b4fd164898df0c2f5b0adbf81a78; from 43201767b44cbd873c60dbd2acd370147588cb18 before 70662874f646871c2f08ef1cf2544ba9a5f71b96; 43201767b44cbd873c60dbd2acd370147588cb18 builds before 548a1bfe591364e63bce4af7c5802bb434efdaf8; 43201767b44cbd873c60dbd2acd370147588cb18 builds before 4de9ed2ea22d611b4149969266b45a86ea8daf35; 43201767b44cbd873c60dbd2acd370147588cb18 builds before 783f05e560d761dee7ff602b97edb0e54f2e9727; 43201767b44cbd873c60dbd2acd370147588cb18 builds before 55dc632ab2ac2889b15995a9eef56c753d48ebc7	CNA record
linux linux_kernel linux:linux_kernel	from 5.4 before 5.10.253; from 5.11 before 5.15.203; from 5.16 before 6.1.167; from 6.2 before 6.6.130; from 6.7 before 6.12.78; from 6.13 before 6.18.20; from 6.19 before 6.19.10; 7.0; and 3 more ranges	NVD

References

References

https://git.kernel.org/stable/c/0c2320c3c860d281cbc2f49fc574c1947a6b9e2a	patch
https://git.kernel.org/stable/c/2a175bc3c338c6b2bc55004e93dd35a2467bdca2	patch
https://git.kernel.org/stable/c/c24dcac1a9d1b4fd164898df0c2f5b0adbf81a78	patch
https://git.kernel.org/stable/c/70662874f646871c2f08ef1cf2544ba9a5f71b96	patch
https://git.kernel.org/stable/c/548a1bfe591364e63bce4af7c5802bb434efdaf8	patch
https://git.kernel.org/stable/c/4de9ed2ea22d611b4149969266b45a86ea8daf35	patch
https://git.kernel.org/stable/c/783f05e560d761dee7ff602b97edb0e54f2e9727	patch
https://git.kernel.org/stable/c/55dc632ab2ac2889b15995a9eef56c753d48ebc7	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.