CVE-2026-46269

Source
https://cve.org/CVERecord?id=CVE-2026-46269
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46269.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-46269
Downstream
Published
2026-06-03T15:50:11Z
Modified
2026-10-28T02:30:47Z
Summary
pinctrl: canaan: k230: Fix NULL pointer dereference when parsing devicetree
Details

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: canaan: k230: Fix NULL pointer dereference when parsing devicetree

When probing the k230 pinctrl driver, the kernel triggers a NULL pointer dereference. The crash trace showed: [ 0.732084] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000068 [ 0.740737] ... [ 0.776296] epc : k230_pinctrl_probe+0x1be/0x4fc

In k230_pinctrl_parse_functions(), we attempt to retrieve the device pointer via info->pctl_dev->dev, but info->pctl_dev is only initialized after k230_pinctrl_parse_dt() completes.

At the time of DT parsing, info->pctl_dev is still NULL, leading to the invalid dereference of info->pctl_dev->dev.

Use the already available device pointer from platform_device instead of accessing through uninitialized pctl_dev.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46269.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d94a32ac688f953dc9a9f12b5b4139ecad841bbb
Fixed
3c7d637bfc3dfbd6471c68bd767f7eb8b5b09eba
Fixed
1d0d361f4dbc2bb2003594f84e4b101fc6b508c0
Fixed
d8c128fb6c2277d95f3f6a4ce28b82c8370031f6
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.15.10
Fixed
6.16
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.16.1
Fixed
6.17
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
02c1deb1bff2b6d242e29a51e56107495979a2b8
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0ec03251d01494ef207089b5bd626becfd05fd86

Affected versions

v6.*
v6.15.10
v6.15.11
v6.16.1
v6.16.10
v6.16.11
v6.16.12
v6.16.2
v6.16.3
v6.16.4
v6.16.5
v6.16.6
v6.16.7
v6.16.8
v6.16.9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46269.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.17.0
Fixed
6.18.14
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
6.19.4

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46269.json"