CVE-2026-64521: pinctrl: meson: amlogic-a4: fix deadlock issue

Published Jul 25, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: meson: amlogic-a4: fix deadlock issue

Accessing the pinconf-pins sysfs node may deadlock.

pinconfpinsshow() holds pctldev->mutex, and the platform driver calls pinctrlfindgpiorangefrompin(), which tries to acquire the same mutex again, leading to a deadlock.

Use pinctrlfindgpiorangefrompinnolock() to fix this issue.

Affected Software

1 affected component

Linux Kernel

Event History

Jul 25, 2026

CVE Published

via MITRE·09:14 AM

Data Sourced

via MITRE·09:14 AM

Description

Data Sourced

via NVD·10:17 AM

Description

Frequently Asked Questions

What is the severity of CVE-2026-64521?

The severity of CVE-2026-64521 is rated at 15.

What systems are affected by CVE-2026-64521?

CVE-2026-64521 affects the Linux kernel, specifically related to pinctrl handling in Amlogic A4 devices.

How do I fix CVE-2026-64521?

To fix CVE-2026-64521, you should apply the latest patches provided for the Linux kernel addressing this deadlock issue.

What is the nature of CVE-2026-64521?

CVE-2026-64521 is a vulnerability that may lead to a deadlock when accessing the pinconf-pins sysfs node in a specific driver.

When was CVE-2026-64521 published?

CVE-2026-64521 was published on July 25, 2026.