Description
In the Linux kernel, the following vulnerability has been resolved:

pinctrl: meson: amlogic-a4: fix deadlock issue

Accessing the pinconf-pins sysfs node may deadlock.

pinconf_pins_show() holds pctldev->mutex, and the platform driver
calls pinctrl_find_gpio_range_from_pin(), which tries to acquire
the same mutex again, leading to a deadlock.

Use pinctrl_find_gpio_range_from_pin_nolock() to fix this issue.
Published: 2026-07-25
Score: n/a
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A re‑entrancy bug in the Meson pinctrl driver for Amlogic A4 devices causes a deadlock when the pinconf‑pins sysfs node is read. The driver routine holds the device mutex while executing pinctrl_find_gpio_range_from_pin, which attempts to acquire the same mutex again, locking the kernel and stopping further kernel progress. The flaw is a concurrency bug (CWE-764) and results in a system‑wide denial of service once triggered.

Affected Systems

All Linux kernel builds that include the Meson pinctrl driver for Amlogic A4 hardware are affected. No particular kernel version number is specified; any kernel containing the unpatched driver code referenced in the advisory is vulnerable. The issue is tied to the driver implementation rather than a specific patch level.

Risk and Exploitability

The advisory lists an EPSS score of less than 1%, indicating a low probability of real‑world exploitation. The flaw is not listed in the CISA KEV catalog. Exploitation would require a local actor to read the pinconf‑pins sysfs interface. While the precise permissions for that interface are not stated in the input, it is reasonable to infer that such access is typically restricted to privileged users; a non‑privileged user would normally be unable to trigger the deadlock. The potential impact is a system‑wide denial of service.

Generated by OpenCVE AI on August 3, 2026 at 18:21 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the official kernel patch that replaces pinctrl_find_gpio_range_from_pin() with pinctrl_find_gpio_range_from_pin_nolock() and rebuild your kernel.
  • If an immediate kernel update is not possible, restrict access to the /sys/devices/<device>/pinconf‑pins file so that only root can read or write it (e.g., chmod 600 ...).
  • After applying the patch or the access restriction, reboot the system or restart services that depend on the pinctrl driver to clear any lingering lock states.

Generated by OpenCVE AI on August 3, 2026 at 18:21 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Ubuntu USN Ubuntu USN USN-8618-1 Linux kernel vulnerabilities
History

Sun, 02 Aug 2026 12:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-362

Thu, 30 Jul 2026 12:15:00 +0000


Tue, 28 Jul 2026 16:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-362

Sat, 25 Jul 2026 09:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: pinctrl: meson: amlogic-a4: fix deadlock issue Accessing the pinconf-pins sysfs node may deadlock. pinconf_pins_show() holds pctldev->mutex, and the platform driver calls pinctrl_find_gpio_range_from_pin(), which tries to acquire the same mutex again, leading to a deadlock. Use pinctrl_find_gpio_range_from_pin_nolock() to fix this issue.
Title pinctrl: meson: amlogic-a4: fix deadlock issue
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-07-25T09:14:46.709Z

Reserved: 2026-07-19T15:36:31.794Z

Link: CVE-2026-64521

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-07-25T10:17:38.393

Modified: 2026-07-25T10:17:38.393

Link: CVE-2026-64521

cve-icon Redhat

Severity :

Publid Date: 2026-07-25T00:00:00Z

Links: CVE-2026-64521 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-03T18:30:06Z

Weaknesses
  • CWE-764

    Multiple Locks of a Critical Resource