Linux Kernel Vulnerability in Pin Control Configuration by The Linux Foundation

CVE-2026-53307

What is CVE-2026-53307?

The Linux kernel has been identified with a vulnerability in the pin control configuration, specifically regarding the ‘pinmux’ property. The pinconf_generic_parse_dt_pinmux() function does not adequately verify the presence and length of the ‘pinmux’ property when it is defined. This oversight may result in an attempt to access invalid memory during execution, leading to potential crashes. The fix addresses this issue by ensuring comprehensive validation of the ‘pinmux’ value when parsing device tree configurations.

References