NetSight
IP …
high7.1

CVE-2025-38286

In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91: Fix possible out-of-boundary access at91_gpio_probe() doesn't check that giv…

Impact

In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91: Fix possible out-of-boundary access at91_gpio_probe() doesn't check that given OF alias is not available or something went wrong when trying to get it. This might have consequences when accessing gpio_chips array with that value as an index. Note, that BUG() can be compiled out and hence won't actually perform the required checks.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.8 before 5.4.295
from 5.5 before 5.10.239
from 5.11 before 5.15.186
from 5.16 before 6.1.142
from 6.2 before 6.6.94
from 6.7 before 6.12.34
DebianDebian Linux
Version 11.0

Weakness classification

CWE-125

References