CVE-2024-26751
kernel: ARM: ep93xx: Add terminator to gpiod_lookup_table
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · April 3, 2024
Updated · November 21, 2025
Description
A flaw was found in the ep93xx GPIO driver in the Linux kernel. This flaw is due to a missing terminator in a gpiod_lookup_table, which can lead to undefined behavior when GPIO descriptors are looked up. A local attacker could potentially trigger a system crash or other unintended behavior, affecting system stability and availability.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-606 · Unchecked Input for Loop Condition