CVE-2026-93274

pinctrl: bcm2835: Don't remove an unregistered GPIO chip

State: Published
Severity: Not scored
Published: Sep 24, 2026
Updated: Oct 19, 2026
Reserved: Sep 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: bcm2835: Don't remove an unregistered GPIO chip

If the devm_pinctrl_register() function fails, bcm2835_pinctrl_probe() calls gpiochip_remove() before gpiochip_add_data() has registered the GPIO chip.

This means that upon failure the gpio_chip.gpiodev is NULL resulting in a null pointer dereference inside the gpiochip_remove() function.

Remove the unnecessary function call to gpiochip_remove(). No GPIO cleanup is required because the GPIO chip has not yet been registered. Without this change there is potential for a kernel panic upon registration failure

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ba696b470839d70c6b8290c1f798bac7fb2a584c to before d428863ca8baa4e9eaf781266ac219b017dcf277Affected 79c6d4fa1be1fd0819c50ebb4dee101bbbc4d20e to before f494cfc254cd509d7cbc44b843e0a6602a520a33Affected 266423e60ea1b953fcc0cd97f3dad85857e434d1 to before dd6b1919e41d1260259c4505777be565fb3a7efdAffected 266423e60ea1b953fcc0cd97f3dad85857e434d1 to before 3b978fd0a3092b25561ac26bc1a87149fa981ddcAffected 266423e60ea1b953fcc0cd97f3dad85857e434d1 to before b8535f5c77cc61352d02a0c038a280127a8b8208Affected 266423e60ea1b953fcc0cd97f3dad85857e434d1 to before 68ea6dd23b732081826c36033835468383487864Affected 266423e60ea1b953fcc0cd97f3dad85857e434d1 to before 727f043d699ab0d5d87122c2177f2b45fbe58d35Affected 266423e60ea1b953fcc0cd97f3dad85857e434d1 to before 32711f77db0641e57fd96fdc013bf1286b9f2514Affected 75278f1aff5e14c904d3503c6f836c42a7afb441Affected 5.10.89 to before 5.10.270Affected 5.15.12 to before 5.15.221Affected 5.4.175 to before 5.5Affected
LinuxLinux	5.16Affected before 5.16Not affected 5.10.270 through 5.10.Not affected 5.15.221 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.52 through 6.18.Not affected 7.2.6 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

ba696b470839d70c6b8290c1f798bac7fb2a584c to before d428863ca8baa4e9eaf781266ac219b017dcf277Affected
79c6d4fa1be1fd0819c50ebb4dee101bbbc4d20e to before f494cfc254cd509d7cbc44b843e0a6602a520a33Affected
266423e60ea1b953fcc0cd97f3dad85857e434d1 to before dd6b1919e41d1260259c4505777be565fb3a7efdAffected
266423e60ea1b953fcc0cd97f3dad85857e434d1 to before 3b978fd0a3092b25561ac26bc1a87149fa981ddcAffected
266423e60ea1b953fcc0cd97f3dad85857e434d1 to before b8535f5c77cc61352d02a0c038a280127a8b8208Affected
266423e60ea1b953fcc0cd97f3dad85857e434d1 to before 68ea6dd23b732081826c36033835468383487864Affected
266423e60ea1b953fcc0cd97f3dad85857e434d1 to before 727f043d699ab0d5d87122c2177f2b45fbe58d35Affected
266423e60ea1b953fcc0cd97f3dad85857e434d1 to before 32711f77db0641e57fd96fdc013bf1286b9f2514Affected
75278f1aff5e14c904d3503c6f836c42a7afb441Affected
5.10.89 to before 5.10.270Affected
5.15.12 to before 5.15.221Affected
5.4.175 to before 5.5Affected

LinuxLinux

5.16Affected
before 5.16Not affected
5.10.270 through 5.10.*Not affected
5.15.221 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.52 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.