Linux Kernel Vulnerability in Pinctrl Affecting Canaan Products

CVE-2025-38655

What is CVE-2025-38655?

A vulnerability in the Linux kernel's pinctrl component for Canaan devices allows for a NULL pointer dereference under certain conditions. This occurs if the 'pinmux' property is missing from the device tree node, specifically in the group parser. A NULL check has been added to the property retrieval method to mitigate this risk, preventing potential system crashes. Additionally, a minor correction was made to the device ID match table to rectify a typographical error.

References