CVE-2026-53237
kernel: gpio: mvebu: fix NULL pointer dereference in suspend/resume
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · June 25, 2026
Updated · June 26, 2026
Description
A flaw was found in the Linux kernel's Marvell EBU (mvebu) General Purpose Input/Output (GPIO) driver. During system suspend and resume operations, the mvebu_pwm_suspend() and mvebu_pwm_resume() functions are called for all GPIO banks. However, not all banks have Pulse Width Modulation (PWM) functionality, leading to a NULL pointer dereference if the PWM-related pointer is not properly checked. This vulnerability could allow a local attacker to cause a denial of service (DoS) by triggering a kernel crash.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-476 · NULL Pointer Dereference