Improper Order of Device Tree Parsing in Linux Kernel Affects Canaan K230

CVE-2025-38654

What is CVE-2025-38654?

In the Linux kernel, a significant vulnerability was identified in the Canaan K230 pin control driver. The issue stemmed from the incorrect order of device tree parsing relative to the pin control register process. The vulnerability could lead to the use of uninitialized pin resources, potentially causing unexpected behavior in device operations. This flaw has been addressed by ensuring that the device tree parsing is completed before the pin control registration is invoked, thereby enhancing system reliability and security.

References