CVE-2026-93274
Description
In the Linux kernel, the following vulnerability has been resolved: pinctrl: bcm2835: Don't remove an unregistered GPIO chip If the devm_pinctrl_register() function fails, bcm2835_pinctrl_probe() calls gpiochip_remove() before gpiochip_add_data() has registered the GPIO chip. This means that upon failure the gpio_chip.gpiodev is NULL resulting in a null pointer dereference inside the gpiochip_remove() function. Remove the unnecessary function call to gpiochip_remove(). No GPIO cleanup is required because the GPIO chip has not yet been registered. Without this change there is potential for a kernel panic upon registration failure
How to fix
- Linux Linuxd428863ca8baa4e9eaf781266ac219b017dcf277, f494cfc254cd509d7cbc44b843e0a6602a520a33, dd6b1919e41d1260259c4505777be565fb3a7efd, 3b978fd0a3092b25561ac26bc1a87149fa981ddc, b8535f5c77cc61352d02a0c038a280127a8b8208, 68ea6dd23b732081826c36033835468383487864, 727f043d699ab0d5d87122c2177f2b45fbe58d35, 32711f77db0641e57fd96fdc013bf1286b9f2514, 5.10.270, 5.15.221, 5.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | ba696b470839d70c6b8290c1f798bac7fb2a584c ≤ v < d428863ca8baa4e9eaf781266ac219b017dcf277, 79c6d4fa1be1fd0819c50ebb4dee101bbbc4d20e ≤ v < f494cfc254cd509d7cbc44b843e0a6602a520a33, 266423e60ea1b953fcc0cd97f3dad85857e434d1 ≤ v < dd6b1919e41d1260259c4505777be565fb3a7efd, 266423e60ea1b953fcc0cd97f3dad85857e434d1 ≤ v < 3b978fd0a3092b25561ac26bc1a87149fa981ddc, 266423e60ea1b953fcc0cd97f3dad85857e434d1 ≤ v < b8535f5c77cc61352d02a0c038a280127a8b8208, 266423e60ea1b953fcc0cd97f3dad85857e434d1 ≤ v < 68ea6dd23b732081826c36033835468383487864, 266423e60ea1b953fcc0cd97f3dad85857e434d1 ≤ v < 727f043d699ab0d5d87122c2177f2b45fbe58d35, 266423e60ea1b953fcc0cd97f3dad85857e434d1 ≤ v < 32711f77db0641e57fd96fdc013bf1286b9f2514, 75278f1aff5e14c904d3503c6f836c42a7afb441, 5.10.89 ≤ v < 5.10.270, 5.15.12 ≤ v < 5.15.221, 5.4.175 ≤ v < 5.5, 5.16 | d428863ca8baa4e9eaf781266ac219b017dcf277, f494cfc254cd509d7cbc44b843e0a6602a520a33, dd6b1919e41d1260259c4505777be565fb3a7efd, 3b978fd0a3092b25561ac26bc1a87149fa981ddc, b8535f5c77cc61352d02a0c038a280127a8b8208, 68ea6dd23b732081826c36033835468383487864, 727f043d699ab0d5d87122c2177f2b45fbe58d35, 32711f77db0641e57fd96fdc013bf1286b9f2514, 5.10.270, 5.15.221, 5.5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.