CVE-2026-53307: pinctrl: pinconf-generic: Fully validate 'pinmux' property
In the Linux kernel, the following vulnerability has been resolved:
pinctrl: pinconf-generic: Fully validate 'pinmux' property
The pinconfgenericparsedtpinmux() assumes that the 'pinmux' property is not empty when present. This might be not true. With that, the allocator will give a special value in return and not NULL which lead to the crash when trying to access that (invalid) memory. Fix that by fully validating 'pinmux' value, including its length.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53307?
CVE-2026-53307 has a risk rating of 34, indicating a moderate severity level.
How do I fix CVE-2026-53307?
To fix CVE-2026-53307, ensure you update your Linux kernel to the latest patched version.
What systems are affected by CVE-2026-53307?
CVE-2026-53307 affects systems running vulnerable versions of the Linux kernel that utilize the pinctrl subsystem.
What does the 'pinmux' property refer to in CVE-2026-53307?
In CVE-2026-53307, the 'pinmux' property refers to the configuration of pin multiplexing in the Linux kernel's pin control framework.
What risk does CVE-2026-53307 pose to Linux systems?
CVE-2026-53307 poses a risk of potential system misconfiguration or unexpected behavior due to improper validation of the 'pinmux' property.