CVE-2026-46269

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> pinctrl: canaan: k230: Fix NULL pointer dereference when parsing devicetree<br /> <br /> When probing the k230 pinctrl driver, the kernel triggers a NULL pointer<br /> dereference. The crash trace showed:<br /> [ 0.732084] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000068<br /> [ 0.740737] ...<br /> [ 0.776296] epc : k230_pinctrl_probe+0x1be/0x4fc<br /> <br /> In k230_pinctrl_parse_functions(), we attempt to retrieve the device<br /> pointer via info-&gt;pctl_dev-&gt;dev, but info-&gt;pctl_dev is only initialized<br /> after k230_pinctrl_parse_dt() completes.<br /> <br /> At the time of DT parsing, info-&gt;pctl_dev is still NULL, leading to<br /> the invalid dereference of info-&gt;pctl_dev-&gt;dev.<br /> <br /> Use the already available device pointer from platform_device<br /> instead of accessing through uninitialized pctl_dev.