In the Linux kernel, the following vulnerability has been resolved:
gpio: mvebu: fix NULL pointer dereference in suspend/resume
mvebu_pwm_suspend() and mvebu_pwm_resume() are called for all GPIO banks during suspend/resume, but not all banks have PWM functionality. GPIO banks without PWM have mvchip->mvpwm set to NULL.
Calling mvebu_pwm_suspend() with mvpwm == NULL causes a NULL pointer dereference when it tries to access mvpwm->blink_select.
Unable to handle kernel NULL pointer dereference at virtual address 00000020 when write [00000020] *pgd=00000000 Internal error: Oops: 815 [#1] PREEMPT ARM Modules linked in: CPU: 0 UID: 0 PID: 406 Comm: sh Not tainted 6.12.74-rt12-yocto-standard-g4e96f98fb7db-dirty #353 Hardware name: Marvell Armada 370/XP (Device Tree) PC is at regmap_mmio_read+0x38/0x54 LR is at regmap_mmio_read+0x38/0x54 pc : [<c05fd2ac>] lr : [<c05fd2ac>] psr: 200f0013 sp : f0c11d10 ip : 00000000 fp : c100d2f0 r10: c14fb854 r9 : 00000000 r8 : 00000000 r7 : c1799c00 r6 : 00000020 r5 : 00000020 r4 : c179c7c0 r3 : f0a231a0 r2 : 00000020 r1 : 00000020 r0 : 00000000 Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none Control: 10c5387d Table: 135ec059 DAC: 00000051 Call trace: regmap_mmio_read from _regmap_bus_reg_read+0x78/0xac _regmap_bus_reg_read from _regmap_read+0x60/0x154 _regmap_read from regmap_read+0x3c/0x60 regmap_read from mvebu_gpio_suspend+0xa4/0x14c mvebu_gpio_suspend from dpm_run_callback+0x54/0x180 dpm_run_callback from device_suspend+0x124/0x630 device_suspend from dpm_suspend+0x124/0x270 dpm_suspend from dpm_suspend_start+0x64/0x6c dpm_suspend_start from suspend_devices_and_enter+0x140/0x8e8 suspend_devices_and_enter from pm_suspend+0x2fc/0x308 pm_suspend from state_store+0x6c/0xc8 state_store from kernfs_fop_write_iter+0x10c/0x1f8 kernfs_fop_write_iter from vfs_write+0x270/0x468 vfs_write from ksys_write+0x70/0xf0 ksys_write from ret_fast_syscall+0x0/0x54
Add a NULL check for mvchip->mvpwm before calling the PWM suspend/resume functions.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Ubuntu | — | Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-7.0.0-1013-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-7.0.0-1019-raspi-realtimeUpgrade linux-image-7.0.0-31-realtime-64kUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-genericUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-oem-7.0Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-7.0.0-31-genericUpgrade linux-image-oracle-7.0Upgrade linux-image-ibm-7.0Upgrade linux-image-7.0.0-1013-oemUpgrade linux-image-7.0.0-1006-gke-64kUpgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-gkeUpgrade linux-image-ibmUpgrade linux-image-virtualUpgrade linux-image-azureUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-generic-64k-7.0Upgrade linux-image-7.0.0-31-generic-64kUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-7.0.0-2018-nvidia-bosUpgrade linux-image-gcpUpgrade linux-image-aws-64kUpgrade linux-image-nvidiaUpgrade linux-image-azure-7.0Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-7.0.0-1012-awsUpgrade linux-image-gcp-64kUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-7.0.0-1018-nvidiaUpgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-7.0.0-1012-aws-64kUpgrade linux-image-gke-7.0Upgrade linux-image-gke-64k-7.0Upgrade linux-image-gke-64kUpgrade linux-image-oem-26.04bUpgrade linux-image-7.0.0-1006-gkeUpgrade linux-image-realtimeUpgrade linux-image-oem-26.04aUpgrade linux-image-7.0.0-31-realtimeUpgrade linux-image-awsUpgrade linux-image-7.0.0-1019-raspiUpgrade linux-image-7.0.0-1018-nvidia-64kUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-azure-lts-26.04Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-virtual-7.0Upgrade linux-image-nvidia-7.0Upgrade linux-image-raspi-7.0Upgrade linux-image-realtime-64kUpgrade linux-image-aws-64k-7.0Upgrade linux-image-realtime-7.0Upgrade linux-image-raspiUpgrade linux-image-oracleUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-gcp-7.0Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-generic-7.0Upgrade linux-image-7.0.0-2018-nvidia-bos-64kUpgrade linux-image-oem-26.04Upgrade linux-image-nvidia-bos | Sep 14, 2026 | Sep 7, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub