900 matches found
CVE-2026-74519
A flaw was found in the Linux kernel. An issue within the pinctrl subsystem's device tree handling could lead to a double-free vulnerability. This occurs when an error path during device binding attempts to free uninitialized memory, potentially allowing a local attacker to trigger a system crash...
CVE-2026-68465
A flaw was found in the Linux kernel's SDHCI eSDHC i.MX driver. The esdhcchangepinstate function contains an error in how it checks for high-speed pin states. This prevents devices with a sleep pinctrl state from restoring their default pin configuration, potentially leading to an improper system...
cs42l43pinprobe Heap Buffer Overflow DoS
The vulnerability of the cs42l43pinprobe function in the drivers/pinctrl/cirrus/pinctrl-cs42l43.c driver for Linux kernel’s PINCTRL output interface is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100319)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100319 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91: Fix possible out-of-boundary access at91gpioprobe doesn't check that given OF alia...
Linux pinctrl-single.c DoS
The vulnerability of the pinctrl-single.c component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux GPIO Controller Heap Buffer Overflow DoS
The vulnerability of the eqbrirqack function in the drivers/pinctrl/pinctrl-equilibrium.c module of the Linux kernel’s GPIO controller driver leads to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100151)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100151 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91: Fix possible out-of-boundary access at91gpioprobe doesn't check that given OF alia...
SUSE CVE-2026-74519
In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: don't free uninitialized devname on error path dtrememberorfreemap duplicates devname for each map entry. If kstrdupconst fails, dtfreemap frees devname in all nummaps entries, including entries that have not...
AZL-96555 CVE-2026-74519 affecting package kernel for versions less than 6.6.152.1-1
In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: don't free uninitialized devname on error path dtrememberorfreemap duplicates devname for each map entry. If kstrdupconst fails, dtfreemap frees devname in all nummaps entries, including entries that have not...
CVE-2026-74519
In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: don't free uninitialized devname on error path dtrememberorfreemap duplicates devname for each map entry. If kstrdupconst fails, dtfreemap frees devname in all nummaps entries, including entries that have not...
UBUNTU-CVE-2026-74519
In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: don't free uninitialized devname on error path dtrememberorfreemap duplicates devname for each map entry. If kstrdupconst fails, dtfreemap frees devname in all nummaps entries, including entries that have not...
CVE-2026-74519
In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: don't free uninitialized devname on error path dtrememberorfreemap duplicates devname for each map entry. If kstrdupconst fails, dtfreemap frees devname in all nummaps entries, including entries that have not...
CVE-2026-74519 pinctrl: devicetree: don't free uninitialized dev_name on error path
In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: don't free uninitialized devname on error path dtrememberorfreemap duplicates devname for each map entry. If kstrdupconst fails, dtfreemap frees devname in all nummaps entries, including entries that have not...
CVE-2026-74519
In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: don't free uninitialized devname on error path dtrememberorfreemap duplicates devname for each map entry. If kstrdupconst fails, dtfreemap frees devname in all nummaps entries, including entries that have not...
EUVD-2026-59712
In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: don't free uninitialized devname on error path dtrememberorfreemap duplicates devname for each map entry. If kstrdupconst fails, dtfreemap frees devname in all nummaps entries, including entries that have not...
CVE-2026-74519 pinctrl: devicetree: don't free uninitialized dev_name on error path
In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: don't free uninitialized devname on error path dtrememberorfreemap duplicates devname for each map entry. If kstrdupconst fails, dtfreemap frees devname in all nummaps entries, including entries that have not...
CVE-2026-74519
In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: don't free uninitialized devname on error path dtrememberorfreemap duplicates devname for each map entry. If kstrdupconst fails, dtfreemap frees devname in all nummaps entries, including entries that have not...
CVE-2026-74519
CVE-2026-74519 describes a Linux kernel vulnerability in the pinctrl devicetree handling: dt_remember_or_free_map() may free uninitialized dev_name entries if kstrdup_const() fails, leading to a KASAN double-free during cleanup in dt_free_map. The issue arises when pinctrl drivers (e.g., pinctrl-...
CVE-2026-72063
In the Linux kernel, the following vulnerability has been resolved: gpio: tegra: do not call pinctrl for GPIO direction tegragpiodirectioninput and tegragpiodirectionoutput already program the GPIO controller direction registers directly. The additional pinctrlgpiodirectioninput/output calls do n...
UBUNTU-CVE-2026-72063
In the Linux kernel, the following vulnerability has been resolved: gpio: tegra: do not call pinctrl for GPIO direction tegragpiodirectioninput and tegragpiodirectionoutput already program the GPIO controller direction registers directly. The additional pinctrlgpiodirectioninput/output calls do n...