{"schema":"threatline.record/2","record":{"id":"CVE-2026-93274","aliases":[],"summary":"pinctrl: bcm2835: Don't remove an unregistered GPIO chip","details":"In the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: bcm2835: Don't remove an unregistered GPIO chip\n\nIf the devm_pinctrl_register() function fails,\nbcm2835_pinctrl_probe() calls gpiochip_remove()\nbefore gpiochip_add_data() has registered the GPIO chip.\n\nThis means that upon failure the gpio_chip.gpiodev\n is NULL resulting in a null pointer dereference\ninside the gpiochip_remove() function.\n\nRemove the unnecessary function call to gpiochip_remove().\nNo GPIO cleanup is required because the GPIO chip\nhas not yet been registered. Without this change there\nis potential for a kernel panic upon registration failure","categories":["Operating systems"],"product":"Linux","vendor":"Linux","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93274","source_modified_at":"2026-10-19T09:08:28.712Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"ba696b470839d70c6b8290c1f798bac7fb2a584c","lessThan":"d428863ca8baa4e9eaf781266ac219b017dcf277","status":"affected","versionType":"git"},{"version":"79c6d4fa1be1fd0819c50ebb4dee101bbbc4d20e","lessThan":"f494cfc254cd509d7cbc44b843e0a6602a520a33","status":"affected","versionType":"git"},{"version":"266423e60ea1b953fcc0cd97f3dad85857e434d1","lessThan":"dd6b1919e41d1260259c4505777be565fb3a7efd","status":"affected","versionType":"git"},{"version":"266423e60ea1b953fcc0cd97f3dad85857e434d1","lessThan":"3b978fd0a3092b25561ac26bc1a87149fa981ddc","status":"affected","versionType":"git"},{"version":"266423e60ea1b953fcc0cd97f3dad85857e434d1","lessThan":"b8535f5c77cc61352d02a0c038a280127a8b8208","status":"affected","versionType":"git"},{"version":"266423e60ea1b953fcc0cd97f3dad85857e434d1","lessThan":"68ea6dd23b732081826c36033835468383487864","status":"affected","versionType":"git"},{"version":"266423e60ea1b953fcc0cd97f3dad85857e434d1","lessThan":"727f043d699ab0d5d87122c2177f2b45fbe58d35","status":"affected","versionType":"git"},{"version":"266423e60ea1b953fcc0cd97f3dad85857e434d1","lessThan":"32711f77db0641e57fd96fdc013bf1286b9f2514","status":"affected","versionType":"git"},{"version":"75278f1aff5e14c904d3503c6f836c42a7afb441","status":"affected","versionType":"git"},{"version":"5.10.89","lessThan":"5.10.270","status":"affected","versionType":"semver"},{"version":"5.15.12","lessThan":"5.15.221","status":"affected","versionType":"semver"},{"version":"5.4.175","lessThan":"5.5","status":"affected","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93274","source_modified_at":"2026-10-19T09:08:28.712Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"5.16","status":"affected"},{"version":"0","lessThan":"5.16","status":"unaffected","versionType":"semver"},{"version":"5.10.270","lessThanOrEqual":"5.10.*","status":"unaffected","versionType":"semver"},{"version":"5.15.221","lessThanOrEqual":"5.15.*","status":"unaffected","versionType":"semver"},{"version":"6.1.188","lessThanOrEqual":"6.1.*","status":"unaffected","versionType":"semver"},{"version":"6.6.157","lessThanOrEqual":"6.6.*","status":"unaffected","versionType":"semver"},{"version":"6.12.110","lessThanOrEqual":"6.12.*","status":"unaffected","versionType":"semver"},{"version":"6.18.52","lessThanOrEqual":"6.18.*","status":"unaffected","versionType":"semver"},{"version":"7.2.6","lessThanOrEqual":"7.2.*","status":"unaffected","versionType":"semver"},{"version":"7.3","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}],"defaultStatus":"affected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93274","source_modified_at":"2026-10-19T09:08:28.712Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"3b978fd0a3092b25561ac26bc1a87149fa981ddc","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93274","source_modified_at":"2026-10-19T09:08:28.712Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"68ea6dd23b732081826c36033835468383487864","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93274","source_modified_at":"2026-10-19T09:08:28.712Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"727f043d699ab0d5d87122c2177f2b45fbe58d35","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93274","source_modified_at":"2026-10-19T09:08:28.712Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"32711f77db0641e57fd96fdc013bf1286b9f2514","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93274","source_modified_at":"2026-10-19T09:08:28.712Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"5.10.270","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93274","source_modified_at":"2026-10-19T09:08:28.712Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"5.15.221","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93274","source_modified_at":"2026-10-19T09:08:28.712Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"5.5","basis":"first unaffected version stated in the CVE record"}],"cvss":null,"severity":null,"kev":{"listed":false},"epss":{"probability":0.00196,"percentile":0.08844,"score_date":"2026-10-23"},"published_at":"2026-09-24T15:52:16.117Z","modified_at":"2026-10-19T09:08:28.712Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-93274","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-10-19T09:08:28.712Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-93274","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://git.kernel.org/stable/c/d428863ca8baa4e9eaf781266ac219b017dcf277"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/f494cfc254cd509d7cbc44b843e0a6602a520a33"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/dd6b1919e41d1260259c4505777be565fb3a7efd"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/3b978fd0a3092b25561ac26bc1a87149fa981ddc"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/b8535f5c77cc61352d02a0c038a280127a8b8208"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/68ea6dd23b732081826c36033835468383487864"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/727f043d699ab0d5d87122c2177f2b45fbe58d35"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/32711f77db0641e57fd96fdc013bf1286b9f2514"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-19T09:08:28.712Z","content_hash":"b4da4be8f2f15dfe612d08a14b77ebade065578ec5c9759ab25e61a0f01d4e9a"}}