PT-2025-34415 · Linux+3 · Linux Kernel+3

Published 2025-06-24 · Updated 2025-12-15 · CVE-2025-38654

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The Linux kernel contains an issue where the order of device tree parsing and pinctrl registration was incorrect. Moving the device tree parsing before pinctrl registration prevents the use of uninitialized pin resources.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of Uninitialized Resource

Access of Uninitialized Pointer

Weakness Enumeration

CWE-908

CWE-824

Related Identifiers

BDU:2026-03086

CVE-2025-38654

USN-7879-1

USN-7879-2

USN-7879-3

USN-7879-4

USN-7880-1

USN-7934-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Ubuntu

References · 231

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38654.json · Exploit
• https://ubuntu.com/security/CVE-2025-38612 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38515 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38666 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38664 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38473 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38526 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38507 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7879-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38351 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38585 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38561 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38491 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38628 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38619 · Vendor Advisory