CVE-2026-82961

The GPIO syscall handlers in drivers/gpio/gpiohandlers.c did not validate the pin argument supplied by a user-mode caller. zvrfygpiopinconfigure, zvrfygpiopingetconfig and zvrfygpiopininterruptconfigure verified only the device object KSYSCALLDRIVERGPIO / KSYSCALLOBJ and then passed the...

EUVD-2026-112265

The GPIO syscall handlers in drivers/gpio/gpiohandlers.c did not validate the pin argument supplied by a user-mode caller. zvrfygpiopinconfigure, zvrfygpiopingetconfig and zvrfygpiopininterruptconfigure verified only the device object KSYSCALLDRIVERGPIO / KSYSCALLOBJ and then passed the...

CVE-2026-82961 Unvalidated pin index in GPIO syscall handlers allows out-of-bounds kernel writes from user mode

The GPIO syscall handlers in drivers/gpio/gpiohandlers.c did not validate the pin argument supplied by a user-mode caller. zvrfygpiopinconfigure, zvrfygpiopingetconfig and zvrfygpiopininterruptconfigure verified only the device object KSYSCALLDRIVERGPIO / KSYSCALLOBJ and then passed the...

CVE-2026-82961 Unvalidated pin index in GPIO syscall handlers allows out-of-bounds kernel writes from user mode

The GPIO syscall handlers in drivers/gpio/gpiohandlers.c did not validate the pin argument supplied by a user-mode caller. zvrfygpiopinconfigure, zvrfygpiopingetconfig and zvrfygpiopininterruptconfigure verified only the device object KSYSCALLDRIVERGPIO / KSYSCALLOBJ and then passed the...

CVE-2026-82961

In Zephyr RTOS builds with CONFIG_USERSPACE=y, the GPIO syscall handlers in drivers/gpio/gpio_handlers.c fail to validate the pin argument provided by user-mode callers. While the handlers verify the device object, they pass the gpio_pin_t directly to drivers. Because the existing check is wrappe...