Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-38286

pinctrl: at91: Fix possible out-of-boundary access

Description

In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91: Fix possible out-of-boundary access at91_gpio_probe() doesn't check that given OF alias is not available or something went wrong when trying to get it. This might have consequences when accessing gpio_chips array with that value as an index. Note, that BUG() can be compiled out and hence won't actually perform the required checks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 6732ae5cb47c4f9a72727585956f2a5e069d1637 to < 264a5cf0c422e65c94447a1ebebfac7c92690670affected
  • 6732ae5cb47c4f9a72727585956f2a5e069d1637 to < db5665cbfd766db7d8cd0e5fd6e3c0b412916774affected
  • 6732ae5cb47c4f9a72727585956f2a5e069d1637 to < 2ecafe59668d2506a68459a9d169ebe41a147a41affected
  • 6732ae5cb47c4f9a72727585956f2a5e069d1637 to < f1c1fdc41fbf7e308ced9c86f3f66345a3f6f478affected
  • 6732ae5cb47c4f9a72727585956f2a5e069d1637 to < eb435bc4c74acbb286cec773deac13d117d3ef39affected
  • 6732ae5cb47c4f9a72727585956f2a5e069d1637 to < e02e12d6a7ab76c83849a4122785650dc7edef65affected
  • 6732ae5cb47c4f9a72727585956f2a5e069d1637 to < 288c39286f759314ee8fb3a80a858179b4f306daaffected
  • 6732ae5cb47c4f9a72727585956f2a5e069d1637 to < 762ef7d1e6eefad9896560bfcb9bcf7f1b6df9c1affected

Linux Linux

Default version status: affected

  • 3.8affected
  • 0 to < 3.8unaffected
  • 5.4.295 to ≤ 5.4.*unaffected
  • 5.10.239 to ≤ 5.10.*unaffected
  • 5.15.186 to ≤ 5.15.*unaffected
  • 6.1.142 to ≤ 6.1.*unaffected
  • 6.6.94 to ≤ 6.6.*unaffected
  • 6.12.34 to ≤ 6.12.*unaffected
  • 6.15.3 to ≤ 6.15.*unaffected
  • 6.16 to ≤ *unaffected

References