CVE-2025-38286

pinctrl: at91: Fix possible out-of-boundary access

published July 10, 2025

CVSS
—
EPSS
0%
Percentile
11.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: at91: Fix possible out-of-boundary access

at91_gpio_probe() doesn't check that given OF alias is not available or

something went wrong when trying to get it. This might have consequences

when accessing gpio_chips array with that value as an index. Note, that

BUG() can be compiled out and hence won't actually perform the required

checks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00213 · 11.0th percentile
Published
2025-07-10T07:42Z
EPSS history
Timeline
  • 10 JUL 07:42Z
    pinctrl: at91: Fix possible out-of-boundary access
    cvelistv5