CVE-2026-93274

CVE-2026-93274

published September 24, 2026

CVSS
—
EPSS
0%
Percentile
8.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: bcm2835: Don't remove an unregistered GPIO chip

If the devm_pinctrl_register() function fails,

bcm2835_pinctrl_probe() calls gpiochip_remove()

before gpiochip_add_data() has registered the GPIO chip.

This means that upon failure the gpio_chip.gpiodev

is NULL resulting in a null pointer dereference

inside the gpiochip_remove() function.

Remove the unnecessary function call to gpiochip_remove().

No GPIO cleanup is required because the GPIO chip

has not yet been registered. Without this change there

is potential for a kernel panic upon registration failure

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00196 · 8.8th percentile
Published
2026-09-24T20:17Z
References (8)
EPSS history
Timeline
  • 26 SEP 03:27Z
    EPSS moved — → 0%
    epss
  • 24 SEP 15:52Z
    pinctrl: bcm2835: Don't remove an unregistered GPIO chip
    cvelistv5