CVE-2026-53237
Gravedad CVSS v3.1:
MEDIA
Tipo:
CWE-476
Desreferencia a puntero nulo (NULL)
Fecha de publicación:
25/06/2026
Última modificación:
08/07/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
gpio: mvebu: fix NULL pointer dereference in suspend/resume<br />
<br />
mvebu_pwm_suspend() and mvebu_pwm_resume() are called for all GPIO<br />
banks during suspend/resume, but not all banks have PWM functionality.<br />
GPIO banks without PWM have mvchip->mvpwm set to NULL.<br />
<br />
Calling mvebu_pwm_suspend() with mvpwm == NULL causes a NULL pointer<br />
dereference when it tries to access mvpwm->blink_select.<br />
<br />
Unable to handle kernel NULL pointer dereference at virtual address 00000020 when write<br />
[00000020] *pgd=00000000<br />
Internal error: Oops: 815 [#1] PREEMPT ARM<br />
Modules linked in:<br />
CPU: 0 UID: 0 PID: 406 Comm: sh Not tainted 6.12.74-rt12-yocto-standard-g4e96f98fb7db-dirty #353<br />
Hardware name: Marvell Armada 370/XP (Device Tree)<br />
PC is at regmap_mmio_read+0x38/0x54<br />
LR is at regmap_mmio_read+0x38/0x54<br />
pc : [] lr : [] psr: 200f0013<br />
sp : f0c11d10 ip : 00000000 fp : c100d2f0<br />
r10: c14fb854 r9 : 00000000 r8 : 00000000<br />
r7 : c1799c00 r6 : 00000020 r5 : 00000020 r4 : c179c7c0<br />
r3 : f0a231a0 r2 : 00000020 r1 : 00000020 r0 : 00000000<br />
Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none<br />
Control: 10c5387d Table: 135ec059 DAC: 00000051<br />
Call trace:<br />
regmap_mmio_read from _regmap_bus_reg_read+0x78/0xac<br />
_regmap_bus_reg_read from _regmap_read+0x60/0x154<br />
_regmap_read from regmap_read+0x3c/0x60<br />
regmap_read from mvebu_gpio_suspend+0xa4/0x14c<br />
mvebu_gpio_suspend from dpm_run_callback+0x54/0x180<br />
dpm_run_callback from device_suspend+0x124/0x630<br />
device_suspend from dpm_suspend+0x124/0x270<br />
dpm_suspend from dpm_suspend_start+0x64/0x6c<br />
dpm_suspend_start from suspend_devices_and_enter+0x140/0x8e8<br />
suspend_devices_and_enter from pm_suspend+0x2fc/0x308<br />
pm_suspend from state_store+0x6c/0xc8<br />
state_store from kernfs_fop_write_iter+0x10c/0x1f8<br />
kernfs_fop_write_iter from vfs_write+0x270/0x468<br />
vfs_write from ksys_write+0x70/0xf0<br />
ksys_write from ret_fast_syscall+0x0/0x54<br />
<br />
Add a NULL check for mvchip->mvpwm before calling the PWM<br />
suspend/resume functions.
Impacto
Puntuación base 3.x
5.50
Gravedad 3.x
MEDIA
Productos y versiones vulnerables
| CPE | Desde | Hasta |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 4.12 (incluyendo) | 6.6.143 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.7 (incluyendo) | 6.12.94 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.13 (incluyendo) | 6.18.36 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.19 (incluyendo) | 7.0.13 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.1:rc5:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.1:rc6:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.1:rc7:*:*:*:*:*:* |
Para consultar la lista completa de nombres de CPE con productos y versiones, ver esta página
Referencias a soluciones, herramientas e información
- https://git.kernel.org/stable/c/4ef24338eda3c7e96d6f94a988266ff16ed3985d
- https://git.kernel.org/stable/c/6136c1474db88272231573e222896e1998d34662
- https://git.kernel.org/stable/c/7db09011ce62162d72897fc4856b4425245dfe35
- https://git.kernel.org/stable/c/b9ad50d7505ebd48282ec3630258dc820fc85c81
- https://git.kernel.org/stable/c/c9677a9274ffb44987ec209dc8ec9f2d34946956



