PT-2025-51635 · Linux+3 · Linux Kernel+3
Published
2025-11-11
·
Updated
2026-05-07
·
CVE-2025-68222
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains an issue in the pinctrl subsystem, specifically within the s32cc driver. The
s32 pinctrl desc structure is allocated using devm kmalloc(), but not all of its fields are initialized. The num custom params field is used by the pinconf generic parse dt config() function, leading to intermittent allocation errors and potential parse failures in dependent drivers, such as i2c-imx. This can result in issues with device tree parsing and driver initialization. The issue can lead to failures when probing i2c devices and subsequent errors in related drivers.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Access of Uninitialized Pointer
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Ubuntu