01 Record

CVE-2025-38286

pinctrl: at91: Fix possible out-of-boundary access

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

pinctrl: at91: Fix possible out-of-boundary access

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.21% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 11.4% of scored records. A rank, not a probability.
NVD base score: 7.1 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-07-10 07:42Z1 YR AGO

Last updated

2026-05-11 21:24Z5 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-125Out-of-bounds ReadBase

Data version

5.2

Document digest

4a83e5028532b1247ca88dc7dde632c7cf970450c8601fd8ab52cbfdc9e75e15

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux6732ae5cb47c4f9a72727585956f2a5e069d1637 to < 264a5cf0c422e65c94447a1ebebfac7c92690670, 6732ae5cb47c4f9a72727585956f2a5e069d1637 to < db5665cbfd766db7d8cd0e5fd6e3c0b412916774, 6732ae5cb47c4f9a72727585956f2a5e069d1637 to < 2ecafe59668d2506a68459a9d169ebe41a147a41, 6732ae5cb47c4f9a72727585956f2a5e069d1637 to < f1c1fdc41fbf7e308ced9c86f3f66345a3f6f478, 6732ae5cb47c4f9a72727585956f2a5e069d1637 to < eb435bc4c74acbb286cec773deac13d117d3ef39, 6732ae5cb47c4f9a72727585956f2a5e069d1637 to < e02e12d6a7ab76c83849a4122785650dc7edef65, 6732ae5cb47c4f9a72727585956f2a5e069d1637 to < 288c39286f759314ee8fb3a80a858179b4f306da, 6732ae5cb47c4f9a72727585956f2a5e069d1637 to < 762ef7d1e6eefad9896560bfcb9bcf7f1b6df9c1, 3.8—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/264a5cf0c422e65c94447a1ebebfac7c92690670
git.kernel.orghttps://git.kernel.org/stable/c/db5665cbfd766db7d8cd0e5fd6e3c0b412916774
git.kernel.orghttps://git.kernel.org/stable/c/2ecafe59668d2506a68459a9d169ebe41a147a41
git.kernel.orghttps://git.kernel.org/stable/c/f1c1fdc41fbf7e308ced9c86f3f66345a3f6f478
git.kernel.orghttps://git.kernel.org/stable/c/eb435bc4c74acbb286cec773deac13d117d3ef39
git.kernel.orghttps://git.kernel.org/stable/c/e02e12d6a7ab76c83849a4122785650dc7edef65
git.kernel.orghttps://git.kernel.org/stable/c/288c39286f759314ee8fb3a80a858179b4f306da
git.kernel.orghttps://git.kernel.org/stable/c/762ef7d1e6eefad9896560bfcb9bcf7f1b6df9c1
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html

07 Fixed in

Debian 12

linux
Fixed in 6.1.147-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.35-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.12.35-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.