CVE-2026-46269
kernel: pinctrl: canaan: k230: Fix NULL pointer dereference when parsing devicetree
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · June 3, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's k230 pinctrl driver. During the probing process, a NULL pointer dereference can occur when parsing the devicetree. This vulnerability allows a local attacker to trigger a system crash, leading to a Denial of Service (DoS). The issue arises from attempting to access an uninitialized device pointer.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-824 · Access of Uninitialized Pointer