CVE-2025-38286

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
10/07/2025
Last modified:
10/07/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> pinctrl: at91: Fix possible out-of-boundary access<br /> <br /> at91_gpio_probe() doesn&amp;#39;t check that given OF alias is not available or<br /> something went wrong when trying to get it. This might have consequences<br /> when accessing gpio_chips array with that value as an index. Note, that<br /> BUG() can be compiled out and hence won&amp;#39;t actually perform the required<br /> checks.

Impact