{"id":"CVE-2026-93274","title":"In the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: bcm2835: Don't remove an unregistered GPIO chip\n\nIf the devm_pinctrl_register() function fails,\nbcm2835_pinctrl_probe() calls gpiochip_remove()\nbefore gpiochip…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: bcm2835: Don't remove an unregistered GPIO chip\n\nIf the devm_pinctrl_register() function fails,\nbcm2835_pinctrl_probe() calls gpiochip_remove()\nbefore gpiochip…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= ba696b470839d70c6b8290c1f798bac7fb2a584c < d428863ca8baa4e9eaf781266ac219b017dcf277","Linux >= 79c6d4fa1be1fd0819c50ebb4dee101bbbc4d20e < f494cfc254cd509d7cbc44b843e0a6602a520a33","Linux >= 266423e60ea1b953fcc0cd97f3dad85857e434d1 < dd6b1919e41d1260259c4505777be565fb3a7efd","Linux >= 266423e60ea1b953fcc0cd97f3dad85857e434d1 < 3b978fd0a3092b25561ac26bc1a87149fa981ddc","Linux >= 266423e60ea1b953fcc0cd97f3dad85857e434d1 < b8535f5c77cc61352d02a0c038a280127a8b8208","Linux >= 266423e60ea1b953fcc0cd97f3dad85857e434d1 < 68ea6dd23b732081826c36033835468383487864","Linux >= 266423e60ea1b953fcc0cd97f3dad85857e434d1 < 727f043d699ab0d5d87122c2177f2b45fbe58d35","Linux >= 266423e60ea1b953fcc0cd97f3dad85857e434d1 < 32711f77db0641e57fd96fdc013bf1286b9f2514","Linux 75278f1aff5e14c904d3503c6f836c42a7afb441","Linux >= 5.10.89 < 5.10.270","Linux >= 5.15.12 < 5.15.221","Linux >= 5.4.175 < 5.5","Linux 5.16"],"published":"2026-09-24","updated":"2026-09-24","sourceUpdated":"2026-09-24T16:17:24.527","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-93274","references":[{"url":"https://git.kernel.org/stable/c/32711f77db0641e57fd96fdc013bf1286b9f2514","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/3b978fd0a3092b25561ac26bc1a87149fa981ddc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/68ea6dd23b732081826c36033835468383487864","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/727f043d699ab0d5d87122c2177f2b45fbe58d35","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/b8535f5c77cc61352d02a0c038a280127a8b8208","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/d428863ca8baa4e9eaf781266ac219b017dcf277","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/dd6b1919e41d1260259c4505777be565fb3a7efd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/f494cfc254cd509d7cbc44b843e0a6602a520a33","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-09-24T16:47:15.840Z","slug":"CVE-2026-93274","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: bcm2835: Don't remove an unregistered GPIO chip\n\nIf the devm_pinctrl_register() function fails,\nbcm2835_pinctrl_probe() calls gpiochip_remove()\nbefore gpiochip_add_data() has registered the GPIO chip.\n\nThis means that upon failure the gpio_chip.gpiodev\n is NULL resulting in a null pointer dereference\ninside the gpiochip_remove() function.\n\nRemove the unnecessary function call to gpiochip_remove().\nNo GPIO cleanup is required because the GPIO chip\nhas not yet been registered. Without this change there\nis potential for a kernel panic upon registration failure\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}