CVE-2026-93274

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: bcm2835: Don't remove an unregistered GPIO chip

If the devm_pinctrl_register() function fails,

bcm2835_pinctrl_probe() calls gpiochip_remove()

before gpiochip_add_data() has registered the GPIO chip.

This means that upon failure the gpio_chip.gpiodev

is NULL resulting in a null pointer dereference

inside the gpiochip_remove() function.

Remove the unnecessary function call to gpiochip_remove().

No GPIO cleanup is required because the GPIO chip

has not yet been registered. Without this change there

is potential for a kernel panic upon registration failure

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References