---
id: CVE-2026-93274
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  pinctrl: bcm2835: Don't remove an unregistered GPIO chip

  If the devm_pinctrl_register() function fails,
  bcm2835_pinctrl_probe() calls gpiochip_remove()
  before gpiochip…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  pinctrl: bcm2835: Don't remove an unregistered GPIO chip

  If the devm_pinctrl_register() function fails,
  bcm2835_pinctrl_probe() calls gpiochip_remove()
  before gpiochip…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= ba696b470839d70c6b8290c1f798bac7fb2a584c <
    d428863ca8baa4e9eaf781266ac219b017dcf277
  - >-
    Linux >= 79c6d4fa1be1fd0819c50ebb4dee101bbbc4d20e <
    f494cfc254cd509d7cbc44b843e0a6602a520a33
  - >-
    Linux >= 266423e60ea1b953fcc0cd97f3dad85857e434d1 <
    dd6b1919e41d1260259c4505777be565fb3a7efd
  - >-
    Linux >= 266423e60ea1b953fcc0cd97f3dad85857e434d1 <
    3b978fd0a3092b25561ac26bc1a87149fa981ddc
  - >-
    Linux >= 266423e60ea1b953fcc0cd97f3dad85857e434d1 <
    b8535f5c77cc61352d02a0c038a280127a8b8208
  - >-
    Linux >= 266423e60ea1b953fcc0cd97f3dad85857e434d1 <
    68ea6dd23b732081826c36033835468383487864
  - >-
    Linux >= 266423e60ea1b953fcc0cd97f3dad85857e434d1 <
    727f043d699ab0d5d87122c2177f2b45fbe58d35
  - >-
    Linux >= 266423e60ea1b953fcc0cd97f3dad85857e434d1 <
    32711f77db0641e57fd96fdc013bf1286b9f2514
  - Linux 75278f1aff5e14c904d3503c6f836c42a7afb441
  - Linux >= 5.10.89 < 5.10.270
  - Linux >= 5.15.12 < 5.15.221
  - Linux >= 5.4.175 < 5.5
  - Linux 5.16
published: '2026-09-24'
updated: '2026-09-24'
sourceUpdated: '2026-09-24T16:17:24.527'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-93274'
references:
  - url: 'https://git.kernel.org/stable/c/32711f77db0641e57fd96fdc013bf1286b9f2514'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/3b978fd0a3092b25561ac26bc1a87149fa981ddc'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/68ea6dd23b732081826c36033835468383487864'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/727f043d699ab0d5d87122c2177f2b45fbe58d35'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/b8535f5c77cc61352d02a0c038a280127a8b8208'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/d428863ca8baa4e9eaf781266ac219b017dcf277'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/dd6b1919e41d1260259c4505777be565fb3a7efd'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/f494cfc254cd509d7cbc44b843e0a6602a520a33'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-24T16:47:15.840Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: bcm2835: Don't remove an unregistered GPIO chip

If the devm_pinctrl_register() function fails,
bcm2835_pinctrl_probe() calls gpiochip_remove()
before gpiochip_add_data() has registered the GPIO chip.

This means that upon failure the gpio_chip.gpiodev
 is NULL resulting in a null pointer dereference
inside the gpiochip_remove() function.

Remove the unnecessary function call to gpiochip_remove().
No GPIO cleanup is required because the GPIO chip
has not yet been registered. Without this change there
is potential for a kernel panic upon registration failure

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.