CVE-2026-53237

Severity CVSS v4.0:
Pending analysis
Type:
CWE-476 NULL Pointer Dereference
Publication date:
25/06/2026
Last modified:
08/07/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> gpio: mvebu: fix NULL pointer dereference in suspend/resume<br /> <br /> mvebu_pwm_suspend() and mvebu_pwm_resume() are called for all GPIO<br /> banks during suspend/resume, but not all banks have PWM functionality.<br /> GPIO banks without PWM have mvchip-&gt;mvpwm set to NULL.<br /> <br /> Calling mvebu_pwm_suspend() with mvpwm == NULL causes a NULL pointer<br /> dereference when it tries to access mvpwm-&gt;blink_select.<br /> <br /> Unable to handle kernel NULL pointer dereference at virtual address 00000020 when write<br /> [00000020] *pgd=00000000<br /> Internal error: Oops: 815 [#1] PREEMPT ARM<br /> Modules linked in:<br /> CPU: 0 UID: 0 PID: 406 Comm: sh Not tainted 6.12.74-rt12-yocto-standard-g4e96f98fb7db-dirty #353<br /> Hardware name: Marvell Armada 370/XP (Device Tree)<br /> PC is at regmap_mmio_read+0x38/0x54<br /> LR is at regmap_mmio_read+0x38/0x54<br /> pc : [] lr : [] psr: 200f0013<br /> sp : f0c11d10 ip : 00000000 fp : c100d2f0<br /> r10: c14fb854 r9 : 00000000 r8 : 00000000<br /> r7 : c1799c00 r6 : 00000020 r5 : 00000020 r4 : c179c7c0<br /> r3 : f0a231a0 r2 : 00000020 r1 : 00000020 r0 : 00000000<br /> Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none<br /> Control: 10c5387d Table: 135ec059 DAC: 00000051<br /> Call trace:<br /> regmap_mmio_read from _regmap_bus_reg_read+0x78/0xac<br /> _regmap_bus_reg_read from _regmap_read+0x60/0x154<br /> _regmap_read from regmap_read+0x3c/0x60<br /> regmap_read from mvebu_gpio_suspend+0xa4/0x14c<br /> mvebu_gpio_suspend from dpm_run_callback+0x54/0x180<br /> dpm_run_callback from device_suspend+0x124/0x630<br /> device_suspend from dpm_suspend+0x124/0x270<br /> dpm_suspend from dpm_suspend_start+0x64/0x6c<br /> dpm_suspend_start from suspend_devices_and_enter+0x140/0x8e8<br /> suspend_devices_and_enter from pm_suspend+0x2fc/0x308<br /> pm_suspend from state_store+0x6c/0xc8<br /> state_store from kernfs_fop_write_iter+0x10c/0x1f8<br /> kernfs_fop_write_iter from vfs_write+0x270/0x468<br /> vfs_write from ksys_write+0x70/0xf0<br /> ksys_write from ret_fast_syscall+0x0/0x54<br /> <br /> Add a NULL check for mvchip-&gt;mvpwm before calling the PWM<br /> suspend/resume functions.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.12 (including) 6.6.143 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.12.94 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.13 (including) 6.18.36 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.19 (including) 7.0.13 (excluding)
cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc7:*:*:*:*:*:*