ACPI GPIO Information Initialization Flaw in Linux Kernel Affects Driver Functionality

CVE-2025-39960

What is CVE-2025-39960?

A vulnerability has been identified within the Linux Kernel where the uninitialized 'acpi_gpio_info' structure is passed to the '__acpi_find_gpio()' function. This misconfiguration can lead to failures in driver initialization for I2C HID devices, directly impacting their operation and functionality. The issue predominantly arises due to the absence of proper initialization before accessing 'info->quirks' within the 'acpi_populate_gpio_lookup()' method, resulting in instability and errors during device probing.

References