Riskcovery

CVE-2025-38654

pinctrl: canaan: k230: Fix order of DT parse and pinctrl register

State
Published
Severity
Not scored
Published
Aug 22, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: canaan: k230: Fix order of DT parse and pinctrl register

Move DT parse before pinctrl register. This ensures that device tree parsing is done before calling devm_pinctrl_register() to prevent using uninitialized pin resources.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 545887eab6f6776a7477fe7e83860eab57138b03 to before 02c1deb1bff2b6d242e29a51e56107495979a2b8Affected
  • 545887eab6f6776a7477fe7e83860eab57138b03 to before 0ec03251d01494ef207089b5bd626becfd05fd86Affected
  • 545887eab6f6776a7477fe7e83860eab57138b03 to before d94a32ac688f953dc9a9f12b5b4139ecad841bbbAffected
LinuxLinux
  • 6.13Affected
  • before 6.13Not affected
  • 6.15.10 through 6.15.*Not affected
  • 6.16.1 through 6.16.*Not affected
  • 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.