PT-2025-34394 · Linux+5 · Linux Kernel+5
Published
2025-07-08
·
Updated
2026-04-20
·
CVE-2025-38632
CVSS v3.1
4.7
Medium
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A race condition in the pinmux functionality can lead to a NULL pointer dereference. This occurs due to improper handling of
mux usecount and mux owner updates when multiple processes access the same GPIO pin concurrently. Specifically, the issue arises from interleaving operations in pin request() and pin free() functions, where mux owner can be set to NULL while mux usecount is still greater than zero, potentially causing a crash on subsequent requests for the same pin. The root cause is non-atomic updates to mux usecount and mux owner.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu