Linux Kernel Vulnerability in bcm2835 Pinctrl Management

CVE-2026-93274

What is CVE-2026-93274?

A vulnerability in the Linux kernel's bcm2835 pinctrl management has been identified, where the function devm_pinctrl_register() may fail, leading to an improper cleanup of unregistered GPIO chips. The bcm2835_pinctrl_probe() function erroneously attempts to call gpiochip_remove() before the GPIO chip is registered, resulting in a null pointer dereference and potential kernel panic. The unnecessary gpiochip_remove() function call has been eliminated to prevent this issue, ensuring stable GPIO operations during initialization failure.

References