CVE-2026-46269Patch(linux / linux_kernel)

LOWCVSS 5.5 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch linux linux_kernel systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: pinctrl: canaan: k230: Fix NULL pointer dereference when parsing devicetree When probing the k230 pinctrl driver, the kernel triggers a NULL pointer dereference. The crash trace showed: [ 0.732084] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000068 [ 0.740737] ... [ 0.776296] epc : k230_pinctrl_probe+0x1be/0x4fc In k230_pinctrl_parse_functions(), we attempt to retrieve the device pointer via info->pctl_dev->dev, but info->pctl_dev is only initialized after k230_pinctrl_parse_dt() completes. At the time of DT parsing, info->pctl_dev is still NULL, leading to the invalid dereference of info->pctl_dev->dev. Use the already available device pointer from platform_device instead of accessing through uninitialized pctl_dev.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-476

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • linux_kernel

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 3 signals
  • General: 1 classified signal
  • Peaked at 2 mentions on most recent observed day (2026-06-04)
  • 3 total mentions across 2 days

Affected systems

Vendors
Products
linux_kernel

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-06-03: 1Mentions · 2026-06-04: 2Patch / Workaround · 2026-06-04: 2Technical Details · 2026-06-03: 1Technical Details · 2026-06-04: 206-0306-04
Signal classification2 categories
Patch
266.7%
General
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-06-031
General1
2026-06-042
Patch2
Full discourse3 posts
  • Infoflowcloud@infoflowcloud
    Patch

    🚨*CVE* CVE-2026-46269 In the Linux kernel, the following vulnerability has been resolved: pinctrl: canaan: k230: Fix NULL pointer dereference when parsing devicetree When probing the k23… https://www.cve.org/CVERecord?id=CVE-2026-46269 ----- Traducción: CVE-2026-46269 En … http://infoflow.cloud`

    Post summary

    CVE-2026-46269, a NULL pointer dereference in the Linux kernel’s pinctrl: canaan component, has already been patched; no PoC, exploit code, or active exploitation details are mentioned.

    0000048
    79 followersView on X
  • CVE@CVEnew
    Patch

    CVE-2026-46269 In the Linux kernel, the following vulnerability has been resolved: pinctrl: canaan: k230: Fix NULL pointer dereference when parsing devicetree When probing the k23… https://www.cve.org/CVERecord?id=CVE-2026-46269

    Post summary

    The post announces that CVE-2026-46269, a NULL pointer dereference in the Linux kernel k230 pinctrl, has been fixed.

    00000231
    57.6K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-46269 NULL Pointer Dereference in Linux Kernel Canaan K230 Pinctrl Driver Probe https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-46269

    Post summary

    The post simply cites CVE-2026-46269 as a NULL pointer dereference in the Kanaan K230 pinctrl driver, with no evidence of a PoC, exploit code, active exploitation, or available patch.

    0000046
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
OSlinuxlinux_kernel---

Explore more