Skip to main content
VulnerabilityPublished Updated

CVE-2026-64521: Linux kernel · pinctrl: meson: amlogic-a4: fix deadlock issue

Affects Linux kernelSource GCVE Database

0

Not known to be exploited · fixed in 7.0.0-1010.10 : update Linux kernel when convenient.

Data as of 26 Oct 2026, 14:05 UTC

Severity
Medium

Rated by Threat Radar · No CVSS score from NVD or the CNA

EPSS
0.2% chance of exploitation in 30 days – higher than 10% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in 7.0.0-1010.10, 7.0.0-1009.9, 7.0.0-1008.8 +1

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 27 Jul 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

Upgrade Linux kernel to 7.0.0-1010.10, 7.0.0-1009.9, 7.0.0-1008.8 or 7.0.0-28.28.

Affected software

ProductAffectedFixed in
linux-hwe-edgeAffected
  • <7.0.0-28.28
  • <7.0.0-1009.9
  • <7.0.0-1010.10
  • <7.0.0-1008.8
Fixed in
  • 7.0.0-28.28
  • 7.0.0-1009.9
  • 7.0.0-1010.10
  • 7.0.0-1008.8

AI-suggested

An official fix is available and included in Ubuntu security updates. Users should update their systems to the patched kernel versions listed in the Ubuntu advisories and reboot to apply the changes. Due to an ABI change, recompilation and reinstallation of third-party kernel modules may be required. No additional mitigation actions are necessary beyond applying the official updates.

Description

A deadlock vulnerability in the Linux kernel's pinctrl subsystem for the meson amlogic-a4 platform was fixed. The issue occurred when accessing the pinconf-pins sysfs node, where a mutex was acquired twice leading to a deadlock. This was resolved by changing the code to avoid re-acquiring the mutex. The vulnerability affects multiple versions of the linux-hwe-edge kernel prior to specific 7.0.0 series builds. A patch is available and included in official Ubuntu kernel updates.

References

Community reviews

Loading reviews…