Riskcovery

CVE-2025-38655

pinctrl: canaan: k230: add NULL check in DT parse

State
Published
Severity
Not scored
Published
Aug 22, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: canaan: k230: add NULL check in DT parse

Add a NULL check for the return value of of_get_property() when retrieving the "pinmux" property in the group parser. This avoids a potential NULL pointer dereference if the property is missing from the device tree node.

Also fix a typo ("sintenel") in the device ID match table comment, correcting it to "sentinel".

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 545887eab6f6776a7477fe7e83860eab57138b03 to before b5ae84aeff60b8819e8568ff0c57590caed9e6d3Affected
  • 545887eab6f6776a7477fe7e83860eab57138b03 to before 5d324b262c0ff256b8d603596574d66267b6394fAffected
  • 545887eab6f6776a7477fe7e83860eab57138b03 to before 65bd0be486390fc12a84eafaad78758c5e5a55e6Affected
LinuxLinux
  • 6.13Affected
  • before 6.13Not affected
  • 6.15.10 through 6.15.*Not affected
  • 6.16.1 through 6.16.*Not affected
  • 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.