CVE-2026-31545
NFC: nxp-nci: allow GPIOs to sleep
Description
In the Linux kernel, the following vulnerability has been resolved: NFC: nxp-nci: allow GPIOs to sleep Allow the firmware and enable GPIOs to sleep. This fixes a `WARN_ON' and allows the driver to operate GPIOs which are connected to I2C GPIO expanders. -- >8 -- kernel: WARNING: CPU: 3 PID: 2636 at drivers/gpio/gpiolib.c:3880 gpiod_set_value+0x88/0x98 -- >8 --
INFO
Published Date :
April 24, 2026, 3:16 p.m.
Last Modified :
April 28, 2026, 8:53 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | MEDIUM | [email protected] |
Solution
- Update the Linux kernel to the latest version.
- Apply the NFC: nxp-nci: allow GPIOs to sleep patch.
- Enable GPIOs to sleep.
- Verify the WARN_ON message is resolved.
Public PoC/Exploit Available at Github
CVE-2026-31545 has a 1 public
PoC/Exploit available at Github.
Go to the Public Exploits tab to see the list.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-31545.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-31545 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-31545
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
DSA and DLA for Debian last 14 days
Python
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-31545 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-31545 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Apr. 28, 2026
Action Type Old Value New Value Added CVSS V3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Added CWE NVD-CWE-noinfo Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.130 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.203 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.167 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.12.78 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.13 up to (excluding) 6.18.20 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.19 up to (excluding) 6.19.10 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.4 up to (excluding) 5.10.253 Added Reference Type kernel.org: https://git.kernel.org/stable/c/0c2320c3c860d281cbc2f49fc574c1947a6b9e2a Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/2a175bc3c338c6b2bc55004e93dd35a2467bdca2 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/4de9ed2ea22d611b4149969266b45a86ea8daf35 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/548a1bfe591364e63bce4af7c5802bb434efdaf8 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/55dc632ab2ac2889b15995a9eef56c753d48ebc7 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/70662874f646871c2f08ef1cf2544ba9a5f71b96 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/783f05e560d761dee7ff602b97edb0e54f2e9727 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/c24dcac1a9d1b4fd164898df0c2f5b0adbf81a78 Types: Patch -
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Apr. 24, 2026
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: NFC: nxp-nci: allow GPIOs to sleep Allow the firmware and enable GPIOs to sleep. This fixes a `WARN_ON' and allows the driver to operate GPIOs which are connected to I2C GPIO expanders. -- >8 -- kernel: WARNING: CPU: 3 PID: 2636 at drivers/gpio/gpiolib.c:3880 gpiod_set_value+0x88/0x98 -- >8 -- Added Reference https://git.kernel.org/stable/c/0c2320c3c860d281cbc2f49fc574c1947a6b9e2a Added Reference https://git.kernel.org/stable/c/2a175bc3c338c6b2bc55004e93dd35a2467bdca2 Added Reference https://git.kernel.org/stable/c/4de9ed2ea22d611b4149969266b45a86ea8daf35 Added Reference https://git.kernel.org/stable/c/548a1bfe591364e63bce4af7c5802bb434efdaf8 Added Reference https://git.kernel.org/stable/c/55dc632ab2ac2889b15995a9eef56c753d48ebc7 Added Reference https://git.kernel.org/stable/c/70662874f646871c2f08ef1cf2544ba9a5f71b96 Added Reference https://git.kernel.org/stable/c/783f05e560d761dee7ff602b97edb0e54f2e9727 Added Reference https://git.kernel.org/stable/c/c24dcac1a9d1b4fd164898df0c2f5b0adbf81a78