Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-53237

Gravedad CVSS v3.1:
MEDIA
Tipo:
CWE-476 Desreferencia a puntero nulo (NULL)
Fecha de publicación:
25/06/2026
Última modificación:
08/07/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> gpio: mvebu: fix NULL pointer dereference in suspend/resume<br /> <br /> mvebu_pwm_suspend() and mvebu_pwm_resume() are called for all GPIO<br /> banks during suspend/resume, but not all banks have PWM functionality.<br /> GPIO banks without PWM have mvchip-&gt;mvpwm set to NULL.<br /> <br /> Calling mvebu_pwm_suspend() with mvpwm == NULL causes a NULL pointer<br /> dereference when it tries to access mvpwm-&gt;blink_select.<br /> <br /> Unable to handle kernel NULL pointer dereference at virtual address 00000020 when write<br /> [00000020] *pgd=00000000<br /> Internal error: Oops: 815 [#1] PREEMPT ARM<br /> Modules linked in:<br /> CPU: 0 UID: 0 PID: 406 Comm: sh Not tainted 6.12.74-rt12-yocto-standard-g4e96f98fb7db-dirty #353<br /> Hardware name: Marvell Armada 370/XP (Device Tree)<br /> PC is at regmap_mmio_read+0x38/0x54<br /> LR is at regmap_mmio_read+0x38/0x54<br /> pc : [] lr : [] psr: 200f0013<br /> sp : f0c11d10 ip : 00000000 fp : c100d2f0<br /> r10: c14fb854 r9 : 00000000 r8 : 00000000<br /> r7 : c1799c00 r6 : 00000020 r5 : 00000020 r4 : c179c7c0<br /> r3 : f0a231a0 r2 : 00000020 r1 : 00000020 r0 : 00000000<br /> Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none<br /> Control: 10c5387d Table: 135ec059 DAC: 00000051<br /> Call trace:<br /> regmap_mmio_read from _regmap_bus_reg_read+0x78/0xac<br /> _regmap_bus_reg_read from _regmap_read+0x60/0x154<br /> _regmap_read from regmap_read+0x3c/0x60<br /> regmap_read from mvebu_gpio_suspend+0xa4/0x14c<br /> mvebu_gpio_suspend from dpm_run_callback+0x54/0x180<br /> dpm_run_callback from device_suspend+0x124/0x630<br /> device_suspend from dpm_suspend+0x124/0x270<br /> dpm_suspend from dpm_suspend_start+0x64/0x6c<br /> dpm_suspend_start from suspend_devices_and_enter+0x140/0x8e8<br /> suspend_devices_and_enter from pm_suspend+0x2fc/0x308<br /> pm_suspend from state_store+0x6c/0xc8<br /> state_store from kernfs_fop_write_iter+0x10c/0x1f8<br /> kernfs_fop_write_iter from vfs_write+0x270/0x468<br /> vfs_write from ksys_write+0x70/0xf0<br /> ksys_write from ret_fast_syscall+0x0/0x54<br /> <br /> Add a NULL check for mvchip-&gt;mvpwm before calling the PWM<br /> suspend/resume functions.

Productos y versiones vulnerables

CPE Desde Hasta
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.12 (incluyendo) 6.6.143 (excluyendo)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (incluyendo) 6.12.94 (excluyendo)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.13 (incluyendo) 6.18.36 (excluyendo)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.19 (incluyendo) 7.0.13 (excluyendo)
cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc7:*:*:*:*:*:*