CVE-2026-46269

pinctrl: canaan: k230: Fix NULL pointer dereference when parsing devicetree

published June 3, 2026

CVSS
—
EPSS
0%
Percentile
4.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: canaan: k230: Fix NULL pointer dereference when parsing devicetree

When probing the k230 pinctrl driver, the kernel triggers a NULL pointer

dereference. The crash trace showed:

[ 0.732084] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000068

[ 0.740737] ...

[ 0.776296] epc : k230_pinctrl_probe+0x1be/0x4fc

In k230_pinctrl_parse_functions(), we attempt to retrieve the device

pointer via info->pctl_dev->dev, but info->pctl_dev is only initialized

after k230_pinctrl_parse_dt() completes.

At the time of DT parsing, info->pctl_dev is still NULL, leading to

the invalid dereference of info->pctl_dev->dev.

Use the already available device pointer from platform_device

instead of accessing through uninitialized pctl_dev.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00160 · 4.8th percentile
Published
2026-06-03T15:50Z
EPSS history
Timeline
  • 03 JUN 15:50Z
    pinctrl: canaan: k230: Fix NULL pointer dereference when parsing devicetree
    cvelistv5