Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2025-21982

pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw devm_kasprintf() calls can return null pointers on failure. But the return values were not checked in npcm8xx_gpio_fw(). Add NULL check in npcm8xx_gpio_fw(), to handle kernel NULL pointer dereference error.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • acf4884a571709cad99f98aabe08b7cacd62dc80 to < a585f6ea42ec259a9a57e3e2580fa527c92187d0affected
  • acf4884a571709cad99f98aabe08b7cacd62dc80 to < 6a08a86e5aff8e65368ccd463348fdda26100821affected
  • acf4884a571709cad99f98aabe08b7cacd62dc80 to < acf40ab42799e4ae1397ee6f5c5941092d66f999affected

Linux Linux

Default version status: affected

  • 6.7affected
  • 0 to < 6.7unaffected
  • 6.12.20 to ≤ 6.12.*unaffected
  • 6.13.8 to ≤ 6.13.*unaffected
  • 6.14 to ≤ *unaffected

References