CVE-2026-80648

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the spacemit pin set config() function where the code performs a NULL check on the wrong variable. The function uses spacemit get pin() to retrieve a per-pin descriptor but incorrectly validates the pin variable instead of the spin descriptor. Since pin is an unsigned integer where 0 is a valid ID, the system incorrectly rejects the first pin of every group, causing its configuration to be ignored. This logic error can lead to a NULL dereference when accessing spin->pin if the pin ID is not present in the SoC pin table.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.