PT-2025-34416 · Linux+4 · Linux Kernel+4

Published 2025-06-24 · Updated 2025-12-15 · CVE-2025-38655

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A NULL pointer dereference issue was resolved in the pinctrl subsystem for Canaan K230 devices. The vulnerability occurs when retrieving the "pinmux" property from the device tree node, specifically if the property is missing. A missing check for the return value of of get property() could lead to a crash. Additionally, a typo in the device ID match table comment was corrected from "sintenel" to "sentinel".

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-03075

CVE-2025-38655

USN-7879-1

USN-7879-2

USN-7879-3

USN-7879-4

USN-7880-1

USN-7934-1

Affected Products

Astra Linux

Canaan K230

Linuxmint

Linux Kernel

Ubuntu

References · 231

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38655.json · Exploit
• https://ubuntu.com/security/CVE-2025-38612 · Vendor Advisory
• https://git.kernel.org/stable/c/b5ae84aeff60b8819e8568ff0c57590caed9e6d3 · Patch
• https://ubuntu.com/security/CVE-2025-38515 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38666 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38664 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38473 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38526 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38507 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7879-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38351 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38585 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38561 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38491 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38628 · Vendor Advisory