« Volver al listado

CVE-2026-93274

Estado: RecibidaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: bcm2835: Don't remove an unregistered GPIO chip

If the devm_pinctrl_register() function fails, bcm2835_pinctrl_probe() calls gpiochip_remove() before gpiochip_add_data() has registered the GPIO chip.

This means that upon failure the gpio_chip.gpiodev is NULL resulting in a null pointer dereference inside the gpiochip_remove() function.

Remove the unnecessary function call to gpiochip_remove(). No GPIO cleanup is required because the GPIO chip has not yet been registered. Without this change there is potential for a kernel panic upon registration failure

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-93274",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "ba696b470839d70c6b8290c1f798bac7fb2a584c",
              "lessThan": "d428863ca8baa4e9eaf781266ac219b017dcf277",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "79c6d4fa1be1fd0819c50ebb4dee101bbbc4d20e",
              "lessThan": "f494cfc254cd509d7cbc44b843e0a6602a520a33",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "266423e60ea1b953fcc0cd97f3dad85857e434d1",
              "lessThan": "dd6b1919e41d1260259c4505777be565fb3a7efd",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "266423e60ea1b953fcc0cd97f3dad85857e434d1",
              "lessThan": "3b978fd0a3092b25561ac26bc1a87149fa981ddc",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "266423e60ea1b953fcc0cd97f3dad85857e434d1",
              "lessThan": "b8535f5c77cc61352d02a0c038a280127a8b8208",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "266423e60ea1b953fcc0cd97f3dad85857e434d1",
              "lessThan": "68ea6dd23b732081826c36033835468383487864",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "266423e60ea1b953fcc0cd97f3dad85857e434d1",
              "lessThan": "727f043d699ab0d5d87122c2177f2b45fbe58d35",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "266423e60ea1b953fcc0cd97f3dad85857e434d1",
              "lessThan": "32711f77db0641e57fd96fdc013bf1286b9f2514",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "75278f1aff5e14c904d3503c6f836c42a7afb441",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "5.10.89",
              "lessThan": "5.10.270",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "5.15.12",
              "lessThan": "5.15.221",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "5.4.175",
              "lessThan": "5.5",
              "versionType": "semver"
            }
          ],
          "programFiles": [
            "drivers/pinctrl/bcm/pinctrl-bcm2835.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.16"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "5.16",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "5.10.270",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "status": "unaffected",
              "version": "5.15.221",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "status": "unaffected",
              "version": "6.1.188",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.6.157",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "status": "unaffected",
              "version": "6.12.110",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "status": "unaffected",
              "version": "6.18.52",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "status": "unaffected",
              "version": "7.2.6",
              "versionType": "semver",
              "lessThanOrEqual": "7.2.*"
            },
            {
              "status": "unaffected",
              "version": "7.3-rc1",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "drivers/pinctrl/bcm/pinctrl-bcm2835.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-09-24T16:17:24.527",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/32711f77db0641e57fd96fdc013bf1286b9f2514",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/3b978fd0a3092b25561ac26bc1a87149fa981ddc",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/68ea6dd23b732081826c36033835468383487864",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/727f043d699ab0d5d87122c2177f2b45fbe58d35",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/b8535f5c77cc61352d02a0c038a280127a8b8208",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/d428863ca8baa4e9eaf781266ac219b017dcf277",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/dd6b1919e41d1260259c4505777be565fb3a7efd",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/f494cfc254cd509d7cbc44b843e0a6602a520a33",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: bcm2835: Don't remove an unregistered GPIO chip\n\nIf the devm_pinctrl_register() function fails,\nbcm2835_pinctrl_probe() calls gpiochip_remove()\nbefore gpiochip_add_data() has registered the GPIO chip.\n\nThis means that upon failure the gpio_chip.gpiodev\n is NULL resulting in a null pointer dereference\ninside the gpiochip_remove() function.\n\nRemove the unnecessary function call to gpiochip_remove().\nNo GPIO cleanup is required because the GPIO chip\nhas not yet been registered. Without this change there\nis potential for a kernel panic upon registration failure"
    }
  ],
  "lastModified": "2026-09-24T16:17:24.527",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}