CVE-2025-38655

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-38655
In the Linux kernel, the following vulnerability has been resolved: pinctrl: canaan: k230: add NULL check in DT parse Add a NULL check for the return value of of_get_property() when retrieving the "pinmux" property in the group parser. This avoids a potential NULL pointer dereference if the property is missing from the device tree node. Also fix a typo ("sintenel") in the device ID match table comment, correcting it to "sentinel".

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/5d324b262c0ff256b8d603596574d66267b6394f Patch
https://git.kernel.org/stable/c/65bd0be486390fc12a84eafaad78758c5e5a55e6 Patch
https://git.kernel.org/stable/c/b5ae84aeff60b8819e8568ff0c57590caed9e6d3 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

26 Nov 2025, 16:32

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/5d324b262c0ff256b8d603596574d66267b6394f - () https://git.kernel.org/stable/c/5d324b262c0ff256b8d603596574d66267b6394f - Patch
References () https://git.kernel.org/stable/c/65bd0be486390fc12a84eafaad78758c5e5a55e6 - () https://git.kernel.org/stable/c/65bd0be486390fc12a84eafaad78758c5e5a55e6 - Patch
References () https://git.kernel.org/stable/c/b5ae84aeff60b8819e8568ff0c57590caed9e6d3 - () https://git.kernel.org/stable/c/b5ae84aeff60b8819e8568ff0c57590caed9e6d3 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: pinctrl: canaan: k230: añadir comprobación NULL en el análisis DT. Se añade una comprobación NULL para el valor de retorno de of_get_property() al recuperar la propiedad "pinmux" en el analizador de grupo. Esto evita una posible desreferencia de puntero NULL si la propiedad no se encuentra en el nodo del árbol de dispositivos. También se corrige un error tipográfico ("sintenel") en el comentario de la tabla de coincidencias de ID de dispositivo, corrigiéndolo a "sentinel".
CWE CWE-476
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

22 Aug 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-08-22 16:15

Updated : 2025-11-26 16:32

NVD link : CVE-2025-38655

Mitre link : CVE-2025-38655

CVE.ORG link : CVE-2025-38655

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference