CVE-2025-38395

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods drvdata::gpiods is supposed to hold an array of 'gpio_desc' pointers. But the memory is allocated for only one pointer. This will lead to out-of-bounds access later in the code if 'config::ngpios' is > 1. So fix the code to allocate enough memory to hold 'config::ngpios' of GPIO descriptors. While at it, also move the check for memory allocation failure to be below the allocation to make it more readable.

Affected product and versions

Product

Linux Linux, linux kernel, debian linux

Affected versions

>= d6cd33ad71029a3f77ba1686caf55d4dea58d916 < a3cd5ae7befbac849e0e0529c94ca04e8093cfd2, >= d6cd33ad71029a3f77ba1686caf55d4dea58d916 < 9fe71972869faed1f8f9b3beb9040f9c1b300c79, >= d6cd33ad71029a3f77ba1686caf55d4dea58d916 < 56738cbac3bbb1d39a71a07f57484dec1db8b239, >= d6cd33ad71029a3f77ba1686caf55d4dea58d916 < a1e12fac214d4f49fcb186dbdf9c5592e7fa0a7a, >= d6cd33ad71029a3f77ba1686caf55d4dea58d916 < 24418bc77a66cb5be9f5a837431ba3674ed8b52f, >= d6cd33ad71029a3f77ba1686caf55d4dea58d916 < e4d19e5d71b217940e33f2ef6c6962b7b68c5606, >= d6cd33ad71029a3f77ba1686caf55d4dea58d916 < 3830ab97cda9599872625cc0dc7b00160193634f, >= d6cd33ad71029a3f77ba1686caf55d4dea58d916 < c9764fd88bc744592b0604ccb6b6fc1a5f76b4e3, >= 5.1, >= 5.1 < 5.4.296, >= 5.5 < 5.10.240, >= 5.11 < 5.15.187, >= 5.16 < 6.1.144, >= 6.2 < 6.6.97, >= 6.7 < 6.12.37, >= 6.13 < 6.15.6, 6.16, 11.0

Fixed versions

5.4.296, 5.10.240, 5.15.187, 6.1.144, 6.6.97, 6.12.37, 6.15.6

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE

CWE-125