In the Linux kernel, the following vulnerability has been resolved:
pinctrl: at91: Fix possible out-of-boundary access
at91gpioprobe() doesn't check that given OF alias is not available or something went wrong when trying to get it. This might have consequences when accessing gpio_chips array with that value as an index. Note, that BUG() can be compiled out and hence won't actually perform the required checks.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e02e12d6a7ab76c83849a4122785650dc7edef65",
"target": {
"function": "at91_gpio_probe",
"file": "drivers/pinctrl/pinctrl-at91.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "167215957282038906758649015604668340957",
"length": 2007.0
},
"id": "CVE-2025-38286-18a07c87"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@db5665cbfd766db7d8cd0e5fd6e3c0b412916774",
"target": {
"file": "drivers/pinctrl/pinctrl-at91.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"152897129701642376844916844034973588048",
"148480694228789450657695724451314222956",
"208740182852621530023786246592958859361",
"79878842048667306155704400496877044168",
"17365235029460297172607061367892574424",
"19401809008908641564164356477729001522",
"49178646682239390026917604369004693925",
"193752555302383045133382196633584869760",
"77814257126124185579045910511533286075"
],
"threshold": 0.9
},
"id": "CVE-2025-38286-1e9de1e3"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@288c39286f759314ee8fb3a80a858179b4f306da",
"target": {
"function": "at91_gpio_probe",
"file": "drivers/pinctrl/pinctrl-at91.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "167215957282038906758649015604668340957",
"length": 2007.0
},
"id": "CVE-2025-38286-2e858c25"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2ecafe59668d2506a68459a9d169ebe41a147a41",
"target": {
"file": "drivers/pinctrl/pinctrl-at91.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"152897129701642376844916844034973588048",
"148480694228789450657695724451314222956",
"208740182852621530023786246592958859361",
"79878842048667306155704400496877044168",
"17365235029460297172607061367892574424",
"19401809008908641564164356477729001522",
"49178646682239390026917604369004693925",
"193752555302383045133382196633584869760",
"77814257126124185579045910511533286075"
],
"threshold": 0.9
},
"id": "CVE-2025-38286-4e8c5890"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f1c1fdc41fbf7e308ced9c86f3f66345a3f6f478",
"target": {
"function": "at91_gpio_probe",
"file": "drivers/pinctrl/pinctrl-at91.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "332571203443516845354140877192024999072",
"length": 2558.0
},
"id": "CVE-2025-38286-75cd8a25"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@762ef7d1e6eefad9896560bfcb9bcf7f1b6df9c1",
"target": {
"file": "drivers/pinctrl/pinctrl-at91.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"263383877108749053494316208859932697472",
"148480694228789450657695724451314222956",
"208740182852621530023786246592958859361",
"79878842048667306155704400496877044168",
"17365235029460297172607061367892574424",
"19401809008908641564164356477729001522",
"49178646682239390026917604369004693925",
"72377585326665931839962900075930001760",
"125644291946465971088673989202260393848"
],
"threshold": 0.9
},
"id": "CVE-2025-38286-76d1979b"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@288c39286f759314ee8fb3a80a858179b4f306da",
"target": {
"file": "drivers/pinctrl/pinctrl-at91.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"263383877108749053494316208859932697472",
"148480694228789450657695724451314222956",
"208740182852621530023786246592958859361",
"79878842048667306155704400496877044168",
"17365235029460297172607061367892574424",
"19401809008908641564164356477729001522",
"49178646682239390026917604369004693925",
"72377585326665931839962900075930001760",
"125644291946465971088673989202260393848"
],
"threshold": 0.9
},
"id": "CVE-2025-38286-8179af4e"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eb435bc4c74acbb286cec773deac13d117d3ef39",
"target": {
"function": "at91_gpio_probe",
"file": "drivers/pinctrl/pinctrl-at91.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "167215957282038906758649015604668340957",
"length": 2007.0
},
"id": "CVE-2025-38286-8fc0c2d5"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@762ef7d1e6eefad9896560bfcb9bcf7f1b6df9c1",
"target": {
"function": "at91_gpio_probe",
"file": "drivers/pinctrl/pinctrl-at91.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "167215957282038906758649015604668340957",
"length": 2007.0
},
"id": "CVE-2025-38286-97ada764"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f1c1fdc41fbf7e308ced9c86f3f66345a3f6f478",
"target": {
"file": "drivers/pinctrl/pinctrl-at91.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"152897129701642376844916844034973588048",
"148480694228789450657695724451314222956",
"208740182852621530023786246592958859361",
"79878842048667306155704400496877044168",
"17365235029460297172607061367892574424",
"19401809008908641564164356477729001522",
"49178646682239390026917604369004693925",
"193752555302383045133382196633584869760",
"77814257126124185579045910511533286075"
],
"threshold": 0.9
},
"id": "CVE-2025-38286-9ed1f66a"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e02e12d6a7ab76c83849a4122785650dc7edef65",
"target": {
"file": "drivers/pinctrl/pinctrl-at91.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"263383877108749053494316208859932697472",
"148480694228789450657695724451314222956",
"208740182852621530023786246592958859361",
"79878842048667306155704400496877044168",
"17365235029460297172607061367892574424",
"19401809008908641564164356477729001522",
"49178646682239390026917604369004693925",
"72377585326665931839962900075930001760",
"125644291946465971088673989202260393848"
],
"threshold": 0.9
},
"id": "CVE-2025-38286-aeaf9d90"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@264a5cf0c422e65c94447a1ebebfac7c92690670",
"target": {
"function": "at91_gpio_probe",
"file": "drivers/pinctrl/pinctrl-at91.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "156086566506925285976394937508433652655",
"length": 2635.0
},
"id": "CVE-2025-38286-c8437752"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@264a5cf0c422e65c94447a1ebebfac7c92690670",
"target": {
"file": "drivers/pinctrl/pinctrl-at91.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"123594251362724274933294399398168569765",
"148480694228789450657695724451314222956",
"208740182852621530023786246592958859361",
"79878842048667306155704400496877044168",
"17365235029460297172607061367892574424",
"19401809008908641564164356477729001522",
"49178646682239390026917604369004693925",
"193752555302383045133382196633584869760",
"77814257126124185579045910511533286075"
],
"threshold": 0.9
},
"id": "CVE-2025-38286-c8a12b88"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2ecafe59668d2506a68459a9d169ebe41a147a41",
"target": {
"function": "at91_gpio_probe",
"file": "drivers/pinctrl/pinctrl-at91.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "111685547913652553244043718542757463065",
"length": 2536.0
},
"id": "CVE-2025-38286-da6f0f26"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@db5665cbfd766db7d8cd0e5fd6e3c0b412916774",
"target": {
"function": "at91_gpio_probe",
"file": "drivers/pinctrl/pinctrl-at91.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "130097048268535832420522347929641915484",
"length": 2530.0
},
"id": "CVE-2025-38286-fa62717e"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eb435bc4c74acbb286cec773deac13d117d3ef39",
"target": {
"file": "drivers/pinctrl/pinctrl-at91.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"263383877108749053494316208859932697472",
"148480694228789450657695724451314222956",
"208740182852621530023786246592958859361",
"79878842048667306155704400496877044168",
"17365235029460297172607061367892574424",
"19401809008908641564164356477729001522",
"49178646682239390026917604369004693925",
"72377585326665931839962900075930001760",
"125644291946465971088673989202260393848"
],
"threshold": 0.9
},
"id": "CVE-2025-38286-fd6a2808"
}
]