CVE-2026-93274

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-93274", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-17T16:02:15.098Z", "datePublished": "2026-09-24T15:52:16.117Z", "dateUpdated": "2026-10-19T09:08:28.712Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-19T09:08:28.712Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: bcm2835: Don't remove an unregistered GPIO chip\n\nIf the devm_pinctrl_register() function fails,\nbcm2835_pinctrl_probe() calls gpiochip_remove()\nbefore gpiochip_add_data() has registered the GPIO chip.\n\nThis means that upon failure the gpio_chip.gpiodev\n is NULL resulting in a null pointer dereference\ninside the gpiochip_remove() function.\n\nRemove the unnecessary function call to gpiochip_remove().\nNo GPIO cleanup is required because the GPIO chip\nhas not yet been registered. Without this change there\nis potential for a kernel panic upon registration failure"}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/pinctrl/bcm/pinctrl-bcm2835.c"], "versions": [{"version": "ba696b470839d70c6b8290c1f798bac7fb2a584c", "lessThan": "d428863ca8baa4e9eaf781266ac219b017dcf277", "status": "affected", "versionType": "git"}, {"version": "79c6d4fa1be1fd0819c50ebb4dee101bbbc4d20e", "lessThan": "f494cfc254cd509d7cbc44b843e0a6602a520a33", "status": "affected", "versionType": "git"}, {"version": "266423e60ea1b953fcc0cd97f3dad85857e434d1", "lessThan": "dd6b1919e41d1260259c4505777be565fb3a7efd", "status": "affected", "versionType": "git"}, {"version": "266423e60ea1b953fcc0cd97f3dad85857e434d1", "lessThan": "3b978fd0a3092b25561ac26bc1a87149fa981ddc", "status": "affected", "versionType": "git"}, {"version": "266423e60ea1b953fcc0cd97f3dad85857e434d1", "lessThan": "b8535f5c77cc61352d02a0c038a280127a8b8208", "status": "affected", "versionType": "git"}, {"version": "266423e60ea1b953fcc0cd97f3dad85857e434d1", "lessThan": "68ea6dd23b732081826c36033835468383487864", "status": "affected", "versionType": "git"}, {"version": "266423e60ea1b953fcc0cd97f3dad85857e434d1", "lessThan": "727f043d699ab0d5d87122c2177f2b45fbe58d35", "status": "affected", "versionType": "git"}, {"version": "266423e60ea1b953fcc0cd97f3dad85857e434d1", "lessThan": "32711f77db0641e57fd96fdc013bf1286b9f2514", "status": "affected", "versionType": "git"}, {"version": "75278f1aff5e14c904d3503c6f836c42a7afb441", "status": "affected", "versionType": "git"}, {"version": "5.10.89", "lessThan": "5.10.270", "status": "affected", "versionType": "semver"}, {"version": "5.15.12", "lessThan": "5.15.221", "status": "affected", "versionType": "semver"}, {"version": "5.4.175", "lessThan": "5.5", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/pinctrl/bcm/pinctrl-bcm2835.c"], "versions": [{"version": "5.16", "status": "affected"}, {"version": "0", "lessThan": "5.16", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.270", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.221", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.188", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.157", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.110", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.52", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.6", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10.89", "versionEndExcluding": "5.10.270"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15.12", "versionEndExcluding": "5.15.221"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "6.1.188"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "6.6.157"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "6.12.110"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "6.18.52"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "7.2.6"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "7.3"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.4.175"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/d428863ca8baa4e9eaf781266ac219b017dcf277"}, {"url": "https://git.kernel.org/stable/c/f494cfc254cd509d7cbc44b843e0a6602a520a33"}, {"url": "https://git.kernel.org/stable/c/dd6b1919e41d1260259c4505777be565fb3a7efd"}, {"url": "https://git.kernel.org/stable/c/3b978fd0a3092b25561ac26bc1a87149fa981ddc"}, {"url": "https://git.kernel.org/stable/c/b8535f5c77cc61352d02a0c038a280127a8b8208"}, {"url": "https://git.kernel.org/stable/c/68ea6dd23b732081826c36033835468383487864"}, {"url": "https://git.kernel.org/stable/c/727f043d699ab0d5d87122c2177f2b45fbe58d35"}, {"url": "https://git.kernel.org/stable/c/32711f77db0641e57fd96fdc013bf1286b9f2514"}], "title": "pinctrl: bcm2835: Don't remove an unregistered GPIO chip", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/pinctrl/bcm/pinctrl-bcm2835.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "d428863ca8baa4e9eaf781266ac219b017dcf277", "status": "affected", "version": "ba696b470839d70c6b8290c1f798bac7fb2a584c", "versionType": "git"}, {"lessThan": "f494cfc254cd509d7cbc44b843e0a6602a520a33", "status": "affected", "version": "79c6d4fa1be1fd0819c50ebb4dee101bbbc4d20e", "versionType": "git"}, {"lessThan": "dd6b1919e41d1260259c4505777be565fb3a7efd", "status": "affected", "version": "266423e60ea1b953fcc0cd97f3dad85857e434d1", "versionType": "git"}, {"lessThan": "3b978fd0a3092b25561ac26bc1a87149fa981ddc", "status": "affected", "version": "266423e60ea1b953fcc0cd97f3dad85857e434d1", "versionType": "git"}, {"lessThan": "b8535f5c77cc61352d02a0c038a280127a8b8208", "status": "affected", "version": "266423e60ea1b953fcc0cd97f3dad85857e434d1", "versionType": "git"}, {"lessThan": "68ea6dd23b732081826c36033835468383487864", "status": "affected", "version": "266423e60ea1b953fcc0cd97f3dad85857e434d1", "versionType": "git"}, {"lessThan": "727f043d699ab0d5d87122c2177f2b45fbe58d35", "status": "affected", "version": "266423e60ea1b953fcc0cd97f3dad85857e434d1", "versionType": "git"}, {"lessThan": "32711f77db0641e57fd96fdc013bf1286b9f2514", "status": "affected", "version": "266423e60ea1b953fcc0cd97f3dad85857e434d1", "versionType": "git"}, {"status": "affected", "version": "75278f1aff5e14c904d3503c6f836c42a7afb441", "versionType": "git"}, {"lessThan": "5.10.270", "status": "affected", "version": "5.10.89", "versionType": "semver"}, {"lessThan": "5.15.221", "status": "affected", "version": "5.15.12", "versionType": "semver"}, {"lessThan": "5.5", "status": "affected", "version": "5.4.175", "versionType": "semver"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/pinctrl/bcm/pinctrl-bcm2835.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.16"}, {"lessThan": "5.16", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.270", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.221", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.188", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.157", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.110", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.52", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.6", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: bcm2835: Don't remove an unregistered GPIO chip\n\nIf the devm_pinctrl_register() function fails,\nbcm2835_pinctrl_probe() calls gpiochip_remove()\nbefore gpiochip_add_data() has registered the GPIO chip.\n\nThis means that upon failure the gpio_chip.gpiodev\n is NULL resulting in a null pointer dereference\ninside the gpiochip_remove() function.\n\nRemove the unnecessary function call to gpiochip_remove().\nNo GPIO cleanup is required because the GPIO chip\nhas not yet been registered. Without this change there\nis potential for a kernel panic upon registration failure"}], "id": "CVE-2026-93274", "lastModified": "2026-10-19T10:17:18.897", "metrics": {}, "published": "2026-09-24T16:17:24.527", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/32711f77db0641e57fd96fdc013bf1286b9f2514"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/3b978fd0a3092b25561ac26bc1a87149fa981ddc"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/68ea6dd23b732081826c36033835468383487864"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/727f043d699ab0d5d87122c2177f2b45fbe58d35"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/b8535f5c77cc61352d02a0c038a280127a8b8208"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/d428863ca8baa4e9eaf781266ac219b017dcf277"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/dd6b1919e41d1260259c4505777be565fb3a7efd"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f494cfc254cd509d7cbc44b843e0a6602a520a33"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: pinctrl: bcm2835: Don't remove an unregistered GPIO chip", "id": "2540310", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2540310"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-476", "details": ["In the Linux kernel, the following vulnerability has been resolved:\npinctrl: bcm2835: Don't remove an unregistered GPIO chip\nIf the devm_pinctrl_register() function fails,\nbcm2835_pinctrl_probe() calls gpiochip_remove()\nbefore gpiochip_add_data() has registered the GPIO chip.\nThis means that upon failure the gpio_chip.gpiodev\nis NULL resulting in a null pointer dereference\ninside the gpiochip_remove() function.\nRemove the unnecessary function call to gpiochip_remove().\nNo GPIO cleanup is required because the GPIO chip\nhas not yet been registered. Without this change there\nis potential for a kernel panic upon registration failure", "A flaw was found in the Linux kernel's Broadcom BCM2835 pin control driver. During device initialization, if pin controller registration fails, the driver attempts to remove an unregistered General Purpose Input/Output (GPIO) chip. This improper error handling leads to a null pointer dereference, causing a Denial of Service (DoS) through a kernel panic."], "name": "CVE-2026-93274", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-09-24T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-93274\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-93274\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-93274.mbox"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ba696b470839d70c6b8290c1f798bac7fb2a584c,d428863ca8baa4e9eaf781266ac219b017dcf277)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[79c6d4fa1be1fd0819c50ebb4dee101bbbc4d20e,f494cfc254cd509d7cbc44b843e0a6602a520a33)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[266423e60ea1b953fcc0cd97f3dad85857e434d1,dd6b1919e41d1260259c4505777be565fb3a7efd)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[266423e60ea1b953fcc0cd97f3dad85857e434d1,3b978fd0a3092b25561ac26bc1a87149fa981ddc)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[266423e60ea1b953fcc0cd97f3dad85857e434d1,b8535f5c77cc61352d02a0c038a280127a8b8208)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[266423e60ea1b953fcc0cd97f3dad85857e434d1,68ea6dd23b732081826c36033835468383487864)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[266423e60ea1b953fcc0cd97f3dad85857e434d1,727f043d699ab0d5d87122c2177f2b45fbe58d35)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[266423e60ea1b953fcc0cd97f3dad85857e434d1,32711f77db0641e57fd96fdc013bf1286b9f2514)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "75278f1aff5e14c904d3503c6f836c42a7afb441"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[5.10.89,5.10.270)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[5.15.12,5.15.221)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.4.175,5.5)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "5.16"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,5.16)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.10.270,5.11.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.15.221,5.16.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.1.188,6.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.157,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.110,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.52,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.6,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3-rc1,*)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-09-25T05:00:09.768658+00:00", "updated": "2026-10-01T17:45:09.992151+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-476"]}