In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91: Fix possible out-of-boundary access at91_gpio_probe() doesn't check that given OF alias is not available or something went wrong when trying to get it. This might have consequences when accessing gpio_chips array with that value as an index. Note, that BUG() can be compiled out and hence won't actually perform the required checks.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/264a5cf0c422e65c94447a1ebebfac7c92690670 cve-icon cve-icon
https://git.kernel.org/stable/c/288c39286f759314ee8fb3a80a858179b4f306da cve-icon cve-icon
https://git.kernel.org/stable/c/2ecafe59668d2506a68459a9d169ebe41a147a41 cve-icon cve-icon
https://git.kernel.org/stable/c/762ef7d1e6eefad9896560bfcb9bcf7f1b6df9c1 cve-icon cve-icon
https://git.kernel.org/stable/c/db5665cbfd766db7d8cd0e5fd6e3c0b412916774 cve-icon cve-icon
https://git.kernel.org/stable/c/e02e12d6a7ab76c83849a4122785650dc7edef65 cve-icon cve-icon
https://git.kernel.org/stable/c/eb435bc4c74acbb286cec773deac13d117d3ef39 cve-icon cve-icon
https://git.kernel.org/stable/c/f1c1fdc41fbf7e308ced9c86f3f66345a3f6f478 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025071010-CVE-2025-38286-eab7@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-38286 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-38286 cve-icon
History

Wed, 16 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00024}

 epss

{'score': 0.00032}

Fri, 11 Jul 2025 12:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Thu, 10 Jul 2025 08:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91: Fix possible out-of-boundary access at91_gpio_probe() doesn't check that given OF alias is not available or something went wrong when trying to get it. This might have consequences when accessing gpio_chips array with that value as an index. Note, that BUG() can be compiled out and hence won't actually perform the required checks.
Title pinctrl: at91: Fix possible out-of-boundary access
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-07-10T07:42:03.409Z

Updated: 2025-07-28T04:17:29.124Z

Reserved: 2025-04-16T04:51:24.000Z

Link: CVE-2025-38286

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-07-10T08:15:27.107

Modified: 2025-07-10T13:17:30.017

Link: CVE-2025-38286

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-07-10T00:00:00Z

Links: CVE-2025-38286 - Bugzilla