CVE Database›Document archive›CVE-2026-53237

CVE-2026-53237

kernel: gpio: mvebu: fix NULL pointer dereference in suspend/resume

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 25, 2026

Updated · June 26, 2026

Description

A flaw was found in the Linux kernel's Marvell EBU (mvebu) General Purpose Input/Output (GPIO) driver. During system suspend and resume operations, the mvebu_pwm_suspend() and mvebu_pwm_resume() functions are called for all GPIO banks. However, not all banks have Pulse Width Modulation (PWM) functionality, leading to a NULL pointer dereference if the PWM-related pointer is not properly checked. This vulnerability could allow a local attacker to cause a denial of service (DoS) by triggering a kernel crash.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-476 · NULL Pointer Dereference