In the Linux kernel, the following vulnerability has been resolved: pinctrl: meson: amlogic-a4: fix deadlock issue Accessing the pinconf-pins sysfs… (CVE-2026-64521)
A deadlock vulnerability in the Linux kernel's pinctrl subsystem for the meson amlogic-a4 platform was fixed. The issue occurred when accessing the pinconf-pins sysfs node, where a mutex was acquired twice leading to a deadlock. The fix involved replacing a function call to avoid re-acquiring the same mutex.
AI Analysis
Technical Summary
CVE-2026-64521 describes a deadlock issue in the Linux kernel's pinctrl driver for the meson amlogic-a4 platform. The vulnerability arises because pinconf_pins_show() holds the pctldev->mutex and then calls pinctrl_find_gpio_range_from_pin(), which attempts to acquire the same mutex again, causing a deadlock. The resolution was to use pinctrl_find_gpio_range_from_pin_nolock(), which does not attempt to re-acquire the mutex, thereby preventing the deadlock condition.
Potential Impact
The vulnerability causes a deadlock when accessing the pinconf-pins sysfs node, potentially leading to a kernel hang or denial of service on affected systems. There is no indication of privilege escalation or code execution impact.
Mitigation Recommendations
A fix is available that replaces the problematic function call with one that does not re-acquire the mutex, resolving the deadlock. Users should apply the official Linux kernel patch that addresses this issue. Since this is a kernel-level fix, updating to a patched kernel version is the recommended remediation.
In the Linux kernel, the following vulnerability has been resolved: pinctrl: meson: amlogic-a4: fix deadlock issue Accessing the pinconf-pins sysfs… (CVE-2026-64521)
Description
A deadlock vulnerability in the Linux kernel's pinctrl subsystem for the meson amlogic-a4 platform was fixed. The issue occurred when accessing the pinconf-pins sysfs node, where a mutex was acquired twice leading to a deadlock. The fix involved replacing a function call to avoid re-acquiring the same mutex.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-64521 describes a deadlock issue in the Linux kernel's pinctrl driver for the meson amlogic-a4 platform. The vulnerability arises because pinconf_pins_show() holds the pctldev->mutex and then calls pinctrl_find_gpio_range_from_pin(), which attempts to acquire the same mutex again, causing a deadlock. The resolution was to use pinctrl_find_gpio_range_from_pin_nolock(), which does not attempt to re-acquire the mutex, thereby preventing the deadlock condition.
Potential Impact
The vulnerability causes a deadlock when accessing the pinconf-pins sysfs node, potentially leading to a kernel hang or denial of service on affected systems. There is no indication of privilege escalation or code execution impact.
Mitigation Recommendations
A fix is available that replaces the problematic function call with one that does not re-acquire the mutex, resolving the deadlock. Users should apply the official Linux kernel patch that addresses this issue. Since this is a kernel-level fix, updating to a patched kernel version is the recommended remediation.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-gf4r-jj9w-gcc4
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64521"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a6542059c2644c7f8081ad6
Added to database: 07/25/2026, 23:08:53 UTC
Last enriched: 07/25/2026, 23:11:41 UTC
Last updated: 07/25/2026, 23:15:25 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.