High 7.8Published May 30, 2024

CVE-2024-36940pinctrl: core: delete incorrect free in pinctrl_enable()

Updated under an hour ago (Oct 27, 2026, 1:00 AM ET)

Does this affect you?

It affects Linux and 6 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: pinctrl: core: delete incorrect free in pinctrl_enable() The "pctldev" struct is allocated in devm_pinctrl_register_and_init(). It's a devm_ managed pointer that is freed by devm_pinctrl_dev_release(), so freeing it in pinctrl_enable() will lead to a double free. The devm_pinctrl_dev_release() function frees the pindescs and destroys the mutex as well.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	6118714275f0a313ecc296a87ed1af32d9691bed builds before 735f4c6b6771eafe336404c157ca683ad72a040d; from 6118714275f0a313ecc296a87ed1af32d9691bed before cdaa171473d98962ae86f2a663d398fda2fbeefd; 6118714275f0a313ecc296a87ed1af32d9691bed builds before 288bc4aa75f150d6f1ee82dd43c6da1b438b6068; 6118714275f0a313ecc296a87ed1af32d9691bed builds before 41f88ef8ba387a12f4a2b8c400b6c9e8e54b2cca; from 6118714275f0a313ecc296a87ed1af32d9691bed before ac7d65795827dc0cf7662384ed27caf4066bd72e; 6118714275f0a313ecc296a87ed1af32d9691bed builds before 558c8039fdf596a584a92c171cbf3298919c448c; from 6118714275f0a313ecc296a87ed1af32d9691bed before f9f1e321d53e4c5b666b66e5b43da29841fb55ba; 6118714275f0a313ecc296a87ed1af32d9691bed builds before 5038a66dad0199de60e5671603ea6623eb9e5c79	CNA record
Siemens RUGGEDCOM RST2428P siemens:ruggedcom_rst2428p (from the name)	before V3.1	CISA ADP
Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family siemens:scalance_xc_300_xr_300_xc_400_xr_500wg_xr_500_family (from the name)	all versions not affected	CISA ADP
Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family siemens:scalance_xcm_xrm_xch_xrh_300_family (from the name)	before V3.1	CISA ADP
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	before V1.1.1	CISA ADP
linux linux_kernel linux:linux_kernel	from 4.11 before 4.19.314; from 4.20 before 5.4.276; from 5.5 before 5.10.217; from 5.11 before 5.15.159; from 5.16 before 6.1.91; from 6.2 before 6.6.31; from 6.7 before 6.8.10; 6.9; and 5 more ranges	NVD
debian debian_linux debian:debian_linux	10.0	NVD

References

References

https://git.kernel.org/stable/c/735f4c6b6771eafe336404c157ca683ad72a040d	patch
https://git.kernel.org/stable/c/cdaa171473d98962ae86f2a663d398fda2fbeefd	patch
https://git.kernel.org/stable/c/288bc4aa75f150d6f1ee82dd43c6da1b438b6068	patch
https://git.kernel.org/stable/c/41f88ef8ba387a12f4a2b8c400b6c9e8e54b2cca	patch
https://git.kernel.org/stable/c/ac7d65795827dc0cf7662384ed27caf4066bd72e	patch
https://git.kernel.org/stable/c/558c8039fdf596a584a92c171cbf3298919c448c	patch
https://git.kernel.org/stable/c/f9f1e321d53e4c5b666b66e5b43da29841fb55ba	patch
https://git.kernel.org/stable/c/5038a66dad0199de60e5671603ea6623eb9e5c79	patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html	mailing-list
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html	mailing-list
1–10 of 12

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.