CVE-2025-38654: pinctrl: canaan: k230: Fix order of DT parse and pinctrl register
In the Linux kernel, the following vulnerability has been resolved:
pinctrl: canaan: k230: Fix order of DT parse and pinctrl register
Move DT parse before pinctrl register. This ensures that device tree parsing is done before calling devmpinctrlregister() to prevent using uninitialized pin resources.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-aws-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1017.17~24.04.1 - Upgrade
Upgrade
ubuntu/linux-azure-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1017.17~24.04.1 - Upgrade
Upgrade
ubuntu/linux-gcp-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1020.21~24.04.1 - Upgrade
Upgrade
ubuntu/linux-oem-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1016.16 - Upgrade
Upgrade
ubuntu/linux-oracle-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1017.17~24.04.1 - Upgrade
Upgrade
ubuntu/linux-riscv-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-36.36.1~24.04.1 - Upgrade
Upgrade
ubuntu/linux-realtime-6.14to a version that resolves this vulnerability.Fixed in 6.14.0-1016.16~24.04.1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38654?
CVE-2025-38654 has been classified with a severity level that warrants attention due to its potential impact on system integrity.
How do I fix CVE-2025-38654?
To fix CVE-2025-38654, ensure that you are using the latest version of the Linux kernel that includes the patch addressing this vulnerability.
What systems are affected by CVE-2025-38654?
CVE-2025-38654 affects systems utilizing the Linux kernel with the specific configuration related to pinctrl and device tree.
What is the main issue resolved in CVE-2025-38654?
CVE-2025-38654 resolves an issue related to the order of device tree parsing and pinctrl registration in the Linux kernel.
Is CVE-2025-38654 exploitable?
CVE-2025-38654 may be exploitable if the affected conditions are met, which could lead to undefined behavior in systems utilizing the vulnerable configurations.