Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2025-39960

gpiolib: acpi: initialize acpi_gpio_info struct

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: gpiolib: acpi: initialize acpi_gpio_info struct Since commit 7c010d463372 ("gpiolib: acpi: Make sure we fill struct acpi_gpio_info"), uninitialized acpi_gpio_info struct are passed to __acpi_find_gpio() and later in the call stack info->quirks is used in acpi_populate_gpio_lookup. This breaks the i2c_hid_cpi driver: [ 58.122916] i2c_hid_acpi i2c-UNIW0001:00: HID over i2c has not been provided an Int IRQ [ 58.123097] i2c_hid_acpi i2c-UNIW0001:00: probe with driver i2c_hid_acpi failed with error -22 Fix this by initializing the acpi_gpio_info pass to __acpi_find_gpio()

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 7c010d463372140006bf96985a306d6cbfc6e118 to < 27d94a2a52cbb54927c0140bd5b978c56e9a283aaffected
  • 7c010d463372140006bf96985a306d6cbfc6e118 to < 19c839a98c731169f06d32e7c9e00c78a0086ebeaffected

Linux Linux

Default version status: affected

  • 6.16affected
  • 0 to < 6.16unaffected
  • 6.16.9 to ≤ 6.16.*unaffected
  • 6.17 to ≤ *unaffected

References