CVE-2026-74519

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the pinctrl devicetree component where the dt remember or free map() function duplicates the dev name for each map entry. If the kstrdup const() function fails, the dt free map() function attempts to free dev name across all entries, including those that have not yet been initialized. Certain pinctrl drivers, such as pinctrl-imx, allocate the map using kmalloc() and rely on the core to initialize dev name. Consequently, uninitialized data is passed to kfree const(), which can lead to a double-free condition. This was observed in the dt free map() function during the binding of a pinctrl-consuming device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.