CVE-2026-90340
Description
In the Linux kernel, the following vulnerability has been resolved: pinctrl: generic: free maps on pinctrl_generic_to_map() failure pinctrl_generic_to_map() parses DT configuration and allocates pinctrl maps via pinctrl_utils_reserve_map(). If subsequent steps (such as pinctrl_utils_add_map_mux(), pinctrl_generic_add_group(), pinconf_generic_parse_dt_config(), or pinctrl_utils_add_map_configs()) return an error, *maps may contain partially allocated map entries. Returning the error directly without freeing *maps leaks the allocated mapping memory across all drivers that rely on pinctrl_generic_to_map(). Fix this by calling pinctrl_utils_free_map() and resetting *maps, *num_maps, and *num_reserved_maps in the error path of pinctrl_generic_to_map().
How to fix
- Linux Linux09f47abc95ee9e819e7e93cd68c1c23abe11c842, 17007cd700601777d9ee203a13d97e64ece3a10f or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | aaaf31be04260316036f50a05b7d015c0d36b55a ≤ v < 09f47abc95ee9e819e7e93cd68c1c23abe11c842, aaaf31be04260316036f50a05b7d015c0d36b55a ≤ v < 17007cd700601777d9ee203a13d97e64ece3a10f, 7.2 | 09f47abc95ee9e819e7e93cd68c1c23abe11c842, 17007cd700601777d9ee203a13d97e64ece3a10f |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.