CVE-2025-68167
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
16/12/2025
Last modified:
18/12/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
gpiolib: fix invalid pointer access in debugfs<br />
<br />
If the memory allocation in gpiolib_seq_start() fails, the s->private<br />
field remains uninitialized and is later dereferenced without checking<br />
in gpiolib_seq_stop(). Initialize s->private to NULL before calling<br />
kzalloc() and check it before dereferencing it.



