CVE-2026-31687

gpio: omap: do not register driver in probe()

published April 27, 2026

CVSS
—
EPSS
0%
Percentile
2.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

gpio: omap: do not register driver in probe()

Commit 11a78b794496 ("ARM: OMAP: MPUIO wake updates") registers the

omap_mpuio_driver from omap_mpuio_init(), which is called from

omap_gpio_probe().

However, it neither makes sense to register drivers from probe()

callbacks of other drivers, nor does the driver core allow registering

drivers with a device lock already being held.

The latter was revealed by commit dc23806a7c47 ("driver core: enforce

device_lock for driver_match_device()") leading to a potential deadlock

condition described in [1].

Additionally, the omap_mpuio_driver is never unregistered from the

driver core, even if the module is unloaded.

Hence, register the omap_mpuio_driver from the module initcall and

unregister it in module_exit().

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00132 · 2.5th percentile
Published
2026-04-27T17:32Z
EPSS history
Timeline
  • 27 APR 17:32Z
    gpio: omap: do not register driver in probe()
    cvelistv5