Deadlock Vulnerability in Amlogic A4 Pin Control within Linux Kernel

CVE-2026-64521

What is CVE-2026-64521?

A vulnerability exists in the Amlogic A4 pin control component of the Linux kernel, which can lead to a deadlock situation when accessing the pinconf-pins sysfs node. The issue arises during the execution of the pinconf_pins_show() function, which holds a mutex, and when the platform driver attempts to call pinctrl_find_gpio_range_from_pin(), it inadvertently tries to acquire the same mutex again. This results in a deadlock. The recommended fix is to utilize the pinctrl_find_gpio_range_from_pin_nolock() function, which addresses this conflict by preventing the re-acquisition of the mutex, thus resolving the deadlock issue.

References