CVE-2026-45868: pinctrl: single: fix refcount leak in pcs_add_gpio_func()
In the Linux kernel, the following vulnerability has been resolved:
pinctrl: single: fix refcount leak in pcsaddgpiofunc()
ofparsephandlewithargs() returns a devicenode pointer with refcount incremented in gpiospec.np. The loop iterates through all phandles but never releases the reference, causing a refcount leak on each iteration.
Add ofnodeput() calls to release the reference after extracting the needed arguments and on the error path when devmkzalloc() fails.
This bug was detected by our static analysis tool and verified by my code review.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Apply the kernel fix for pinctrl single: fix refcount leak in pcs_add_gpio_func() by ensuring the implementation adds the missing of_node_put() calls to release the reference after extracting needed arguments and on the error path when devm_kzalloc() fails.