Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-68167

gpiolib: fix invalid pointer access in debugfs

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix invalid pointer access in debugfs If the memory allocation in gpiolib_seq_start() fails, the s->private field remains uninitialized and is later dereferenced without checking in gpiolib_seq_stop(). Initialize s->private to NULL before calling kzalloc() and check it before dereferencing it.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e348544f7994d252427ed3ae637c7081cbb90f66 to < 70180a6031056096c93ed2f47c41803268bdd91caffected
  • e348544f7994d252427ed3ae637c7081cbb90f66 to < 3c91c8f424d3e44c8645ab765a38773e58afb07daffected
  • e348544f7994d252427ed3ae637c7081cbb90f66 to < 2f6115ad8864cf3f48598f26c74c7c8e5c391919affected

Linux Linux

Default version status: affected

  • 6.9affected
  • 0 to < 6.9unaffected
  • 6.12.58 to ≤ 6.12.*unaffected
  • 6.17.8 to ≤ 6.17.*unaffected
  • 6.18 to ≤ *unaffected

References