Linux Kernel Vulnerability in GPIO Management by Vendor

CVE-2025-21783

Summary

A flaw in the Linux kernel's GPIO subsystem enables a crash scenario when the gpiochip_get_ngpios() function is called without proper initialization of gpiodev. This situation arises in cases like bgpio_init() where the necessary components are not ready, resulting in a NULL pointer dereference when logging messages. The solution involves substituting the chip_() macros with dev_() macros to prevent potential crashes during runtime, enhancing the stability and security of the Linux kernel.

References