CVE-2026-90340

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: pinctrl: generic: free maps on pinctrl_generic_to_map() failure pinctrl_generic_to_map() parses DT configuration and allocates pinctrl maps via pinctrl_utils_reserve_map(). If subsequent steps (such as pinctrl_utils_add_map_mux(), pinctrl_generic_add_group(), pinconf_generic_parse_dt_config(), or pinctrl_utils_add_map_configs()) return an error, *maps may contain partially allocated map entries. Returning the error directly without freeing *maps leaks the allocated mapping memory across all drivers that rely on pinctrl_generic_to_map(). Fix this by calling pinctrl_utils_free_map() and resetting *maps, *num_maps, and *num_reserved_maps in the error path of pinctrl_generic_to_map().

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedSep 17, 2026
First seenSep 17, 2026

How to fix

Update
  • Linux Linux09f47abc95ee9e819e7e93cd68c1c23abe11c842, 17007cd700601777d9ee203a13d97e64ece3a10f or later

Affected products

ProductAffected versionsFixed in
Linux Linuxaaaf31be04260316036f50a05b7d015c0d36b55a ≤ v < 09f47abc95ee9e819e7e93cd68c1c23abe11c842, aaaf31be04260316036f50a05b7d015c0d36b55a ≤ v < 17007cd700601777d9ee203a13d97e64ece3a10f, 7.209f47abc95ee9e819e7e93cd68c1c23abe11c842, 17007cd700601777d9ee203a13d97e64ece3a10f

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.