CVE-2025-40030

CVE-2025-40030: In the Linux kernel’s pinctrl code, pinmux_generic_get_function_name() may return NULL, and the previous code path could dereference it in strcmp(). The fix adds a NULL check in pinmux_func_name_to_selector() (consistent with the existing check in pinmux_check_ops()) to avoid NULL...

CVE-2025-40030 pinctrl: check the return value of pinmux_ops::get_function_name()

In the Linux kernel, the following vulnerability has been resolved: pinctrl: check the return value of pinmuxops::getfunctionname While the API contract in docs doesn't specify it explicitly, the generic implementation of the getfunctionname callback from struct pinmuxops -...

SUSE CVE-2022-50557

In the Linux kernel, the following vulnerability has been resolved: pinctrl: thunderbay: fix possible memory leak in thunderbaybuildfunctions The thunderbayaddfunctions will free memory of thunderbayfuncs when everything is ok, but thunderbayfuncs will not be freed when thunderbayaddfunctions...

Linux Distros Unpatched Vulnerability : CVE-2025-40030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pinctrl: check the return value of pinmuxops::getfunctionname While the API contract in docs doesn't specify it explicitly, the generic implementation of the...

Siemens SIMATIC Devices Deadlock (CVE-2024-42090)

pinctrl: deadlock in createpinctrl when handling -EPROBEDEFER. In createpinctrl, pinctrlmapsmutex is acquired before calling addsetting. If addsetting returns -EPROBEDEFER, createpinctrl calls pinctrlfree. However, pinctrlfree attempts to acquire pinctrlmapsmutex, which is already held by...

Siemens SIMATIC Devices Exposure of Resource to Wrong Sphere (CVE-2024-36959)

In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: fix refcount leak in pinctrldttomap If we fail to allocate propname buffer, we need to drop the reference count we just took. Because the pinctrldtfreemaps includes the droping operation, here we call it...

Siemens SIMATIC Devices Double Free (CVE-2024-36940)

In the Linux kernel, the following vulnerability has been resolved: pinctrl: core: delete incorrect free in pinctrlenable The pctldev struct is allocated in devmpinctrlregisterandinit. It's a devm managed pointer that is freed by devmpinctrldevrelease, so freeing it in pinctrlenable will lead to ...

DEBIAN-CVE-2022-50557

In the Linux kernel, the following vulnerability has been resolved: pinctrl: thunderbay: fix possible memory leak in thunderbaybuildfunctions The thunderbayaddfunctions will free memory of thunderbayfuncs when everything is ok, but thunderbayfuncs will not be freed when thunderbayaddfunctions...

CVE-2022-50557

In the Linux kernel, the following vulnerability has been resolved: pinctrl: thunderbay: fix possible memory leak in thunderbaybuildfunctions The thunderbayaddfunctions will free memory of thunderbayfuncs when everything is ok, but thunderbayfuncs will not be freed when thunderbayaddfunctions...

UBUNTU-CVE-2022-50557

In the Linux kernel, the following vulnerability has been resolved: pinctrl: thunderbay: fix possible memory leak in thunderbaybuildfunctions The thunderbayaddfunctions will free memory of thunderbayfuncs when everything is ok, but thunderbayfuncs will not be freed when thunderbayaddfunctions...

CVE-2022-50557

CVE-2022-50557 concerns the Linux kernel pinctrl thunderbay path, where thunderbay_add_functions() could leak memory if thunderbay_add_functions() failed to free thunderbay_funcs. The root cause was that thunderbay_funcs was freed only on success; on failure it remained allocated. A patch fixes t...

CVE-2022-50557 pinctrl: thunderbay: fix possible memory leak in thunderbay_build_functions()

In the Linux kernel, the following vulnerability has been resolved: pinctrl: thunderbay: fix possible memory leak in thunderbaybuildfunctions The thunderbayaddfunctions will free memory of thunderbayfuncs when everything is ok, but thunderbayfuncs will not be freed when thunderbayaddfunctions...

OESA-2025-2410 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking If a device uses MCP23xxx IO expander to receive IRQs, the following bug can happen: BUG:...

OESA-2025-2409 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking If a device uses MCP23xxx IO expander to receive IRQs, the following bug can happen: BUG:...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986878)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986878 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: renesas: rzn1: Fix possible null-ptr-deref in shpfcmapresources It will cause...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986828)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986828 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: ralink: Check for null return of devmkcalloc Because of the possible failure of the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986830)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986830 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: nomadik: Add missing ofnodeput in nmkpinctrlprobe This node pointer is returned by...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-384561)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-384561 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: core: delete incorrect free in pinctrlenable The pctldev struct is allocated in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987089)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987089 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: single: fix potential NULL dereference Added checking of pointer function in pcssetmux...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986874)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986874 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: aspeed: Fix potential NULL dereference in aspeedpinmuxsetmux pdesc could be null but sti...