PT-2026-43735 · Linux · Linux

Published 2026-05-27 · Updated 2026-05-27 · CVE-2026-45868

NVD

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: single: fix refcount leak in pcs add gpio func()

of parse phandle with args() returns a device node pointer with refcount incremented in gpiospec.np. The loop iterates through all phandles but never releases the reference, causing a refcount leak on each iteration.

Add of node put() calls to release the reference after extracting the needed arguments and on the error path when devm kzalloc() fails.

This bug was detected by our static analysis tool and verified by my code review.

Related Identifiers

CVE-2026-45868

Affected Products

Linux

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-45868 · Security Note
• https://git.kernel.org/stable/c/3e3b28bb0b6ddc521a4fdd1c1ba0d35017a0796b · Note
• https://git.kernel.org/stable/c/456a60d06c09a92680dc35fabca68024badcc28e · Note
• https://git.kernel.org/stable/c/e2e367e56bacb93ce5ac73f0b3297d5c83d38dd4 · Note
• https://git.kernel.org/stable/c/7814b1431848854b56717086e2b61bea3c59753d · Note
• https://git.kernel.org/stable/c/99cc7352156c65201c675f750e0e77c4c73d93f5 · Note
• https://git.kernel.org/stable/c/5b9e84d27e310f22c4ba45fedbc4f5baf43dd823 · Note
• https://git.kernel.org/stable/c/353353309b0f7afa407df29e455f9d15b5acc296 · Note
• https://git.kernel.org/stable/c/191bfd5710d6a7f48ba4315d8d3e908dcc15243c · Note