Out-of-Bounds Access Vulnerability in Linux Kernel GPIO Configuration

CVE-2025-38395

What is CVE-2025-38395?

A vulnerability in the Linux kernel related to the GPIO subsystem has been identified where an out-of-bounds access issue could occur due to insufficient memory allocation for an array of GPIO descriptors. The drvdata::gpiods structure was intended to store multiple pointers to 'gpio_desc', but memory was allocated for only one pointer. This flaw potentially leads to out-of-bounds access when the number of configured GPIOs exceeds one. The recent fix involves correctly allocating memory for 'config::ngpios', ensuring that the correct number of GPIO descriptors is allocated and that the memory allocation process is clearer by repositioning the failure check.

References