CVE-2026-64521
Received Received - Intake

Deadlock in Linux Kernel pinctrl meson amlogic-a4

Publication date: 2026-07-25

Last updated on: 2026-07-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: pinctrl: meson: amlogic-a4: fix deadlock issue Accessing the pinconf-pins sysfs node may deadlock. pinconf_pins_show() holds pctldev->mutex, and the platform driver calls pinctrl_find_gpio_range_from_pin(), which tries to acquire the same mutex again, leading to a deadlock. Use pinctrl_find_gpio_range_from_pin_nolock() to fix this issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-25
Last Modified
2026-07-25
Generated
2026-08-14
AI Q&A
2026-07-25
EPSS Evaluated
2026-08-13
NVD
CVE-2026-64521
EUVD
EUVD-2026-48865

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
amlogic amlogic-a4 *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a deadlock issue in the Linux kernel's pinctrl subsystem for the Amlogic A4 platform. It occurs when accessing the pinconf-pins sysfs node, which can cause the system to hang due to a mutex being acquired twice in a way that creates a circular dependency.

Detection Guidance

This vulnerability is specific to the Linux kernel's pinctrl subsystem for the Amlogic A4 platform. Detection requires checking the kernel version and whether the affected code path is present. Use uname -a to check the kernel version and grep for the affected driver in /lib/modules/$(uname -r)/kernel/drivers/pinctrl/meson/amlogic-a4.ko.

Impact Analysis

This vulnerability can cause system freezes or crashes when specific sysfs operations are performed, potentially leading to denial-of-service conditions on affected Linux systems using the Amlogic A4 platform.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a local deadlock issue in the Linux kernel's pin control subsystem that could cause system hangs but does not involve data exposure or unauthorized access.

Mitigation Strategies

Apply the latest kernel update that includes the fix for this issue. If an update is not immediately available, avoid accessing the pinconf-pins sysfs node to prevent the deadlock. Monitor vendor advisories for patches.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64521. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart