CVE-2026-46269

pinctrl: canaan: k230: Fix NULL pointer dereference when parsing devicetree

MEDIUM
5.5
CVSS Score
Published: June 3, 2026 at 03:50 PM UTC
Updated: July 22, 2026 at 08:24 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: pinctrl: canaan: k230: Fix NULL pointer dereference when parsing devicetree When probing the k230 pinctrl driver, the kernel triggers a NULL pointer dereference. The crash trace showed: [ 0.732084] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000068 [ 0.740737] ... [ 0.776296] epc : k230_pinctrl_probe+0x1be/0x4fc In k230_pinctrl_parse_functions(), we attempt to retrieve the device pointer via info->pctl_dev->dev, but info->pctl_dev is only initialized after k230_pinctrl_parse_dt() completes. At the time of DT parsing, info->pctl_dev is still NULL, leading to the invalid dereference of info->pctl_dev->dev. Use the already available device pointer from platform_device instead of accessing through uninitialized pctl_dev.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v ≥ 6.15.10v ≥ 6.16.16.15.10 ≤ v < 6.166.16.1 ≤ v < 6.176.16.1 ≤ v < 6.18.146.17 ≤ v < 6.18.146.17 ≤ v < 6.19.46.17 ≤ v < 7.06.19 ≤ v < 6.19.40ec03251d01494ef207089b5bd626becfd05fd862c1deb1bff2b6d242e29a51e56107495979a2b86.15.106.16.16.17d94a32ac688f953dc9a9f12b5b4139ecad841bbb
Vendor states this is fixed in 1d0d361f4dbc2bb2003594f84e4b101fc6b508c0 (fixed)
Vendor states this is fixed in 3c7d637bfc3dfbd6471c68bd767f7eb8b5b09eba (fixed)
Vendor states this is fixed in d8c128fb6c2277d95f3f6a4ce28b82c8370031f6 (fixed)
Affected range stops below 6.16, so it looks safe — our inference, not a vendor statement
Vendor states this is fixed in 6.17 (unaffected)
Vendor states this is fixed in 6.18.14 (unaffected)
Vendor states this is fixed in 6.19.4 (unaffected)
Vendor states this is fixed in 7.0 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-476

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card