pinctrl: freescale: Fix a memory out of bounds when num_configs is 1

Versions reported by the vendor

Affected version ranges reported by the assigning authority (Linux). Independent of NVD's CPE analysis and usually ahead of it.

• Linux Linux

  • 6.2affected
  • f60c9eac54af28d7b5651fe49944bfd5098550e6 and later · before f85d3cb10f4df5ae3bdb9a9357315c28d781651faffected · git
  • f60c9eac54af28d7b5651fe49944bfd5098550e6 and later · before 27d9a7585b594bb2f9bb1f65e0003814fcc69c75affected · git
  • f60c9eac54af28d7b5651fe49944bfd5098550e6 and later · before 9063777ca1e2e895c5fdd493ee0c3f18fa710ed4affected · git
  • before 6.2not affected · semver
  • 6.3.13 and later · up to and including 6.3.*not affected · semver
  • 6.4.4 and later · up to and including 6.4.*not affected · semver
  • 6.5 and laternot affected · original_commit_for_fix

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

Other highest-scoring records for the same primary product.

• CVE-2026-74705udp: fix potential use-after-free in tunnel segmentation
  40Plan
• CVE-2026-74612veth: fix skb length accounting after XDP frag adjustment
  40Plan
• CVE-2026-74475vxlan: use neigh_ha_snapshot() in route_shortcircuit()
  40Plan
• CVE-2026-74309vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler
  40Plan
• CVE-2026-74280crypto: marvell/octeontx - fix DMA cleanup using wrong loop index
  40Plan
• CVE-2026-74279crypto: cavium/cpt - fix DMA cleanup using wrong loop index
  40Plan

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.