01 Record

CVE-2025-38516

pinctrl: qcom: msm: mark certain pins as invalid for interrupts

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

pinctrl: qcom: msm: mark certain pins as invalid for interrupts

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.17% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 5.9% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-08-16 10:55Z1 YR AGO

Last updated

2026-05-11 21:29Z5 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-476NULL Pointer DereferenceBase
CWE-229Improper Handling of ValuesBase

Data version

5.2

Document digest

33b792f16ff4595db3b1474236b261bde12461b10786604acee657820b7add2a

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxf365be0925729508fd8e62f8bdb504ef896cb6e0 to < 6a89563ccf9cd0d745e2291302878a061508573f, f365be0925729508fd8e62f8bdb504ef896cb6e0 to < 3f8fc02c2582c1dfad1785e9c7bc8b4e1521af0a, f365be0925729508fd8e62f8bdb504ef896cb6e0 to < cb4b08a095b1fa4b3fca782757517e4e9a917d8e, f365be0925729508fd8e62f8bdb504ef896cb6e0 to < cc145e02d6b8494c48f91958d52fa76b7e577f7b, f365be0925729508fd8e62f8bdb504ef896cb6e0 to < 1d57f7132662e96aace3b8a000616efde289aae1, f365be0925729508fd8e62f8bdb504ef896cb6e0 to < 275605a8b48002fe98675a5c06f3e39c09067ff2, f365be0925729508fd8e62f8bdb504ef896cb6e0 to < 97c9c7daeeb00c6e1d5e84084041f79c2d2dce22, f365be0925729508fd8e62f8bdb504ef896cb6e0 to < 93712205ce2f1fb047739494c0399a26ea4f0890, 3.14—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/6a89563ccf9cd0d745e2291302878a061508573f
git.kernel.orghttps://git.kernel.org/stable/c/3f8fc02c2582c1dfad1785e9c7bc8b4e1521af0a
git.kernel.orghttps://git.kernel.org/stable/c/cb4b08a095b1fa4b3fca782757517e4e9a917d8e
git.kernel.orghttps://git.kernel.org/stable/c/cc145e02d6b8494c48f91958d52fa76b7e577f7b
git.kernel.orghttps://git.kernel.org/stable/c/1d57f7132662e96aace3b8a000616efde289aae1
git.kernel.orghttps://git.kernel.org/stable/c/275605a8b48002fe98675a5c06f3e39c09067ff2
git.kernel.orghttps://git.kernel.org/stable/c/97c9c7daeeb00c6e1d5e84084041f79c2d2dce22
git.kernel.orghttps://git.kernel.org/stable/c/93712205ce2f1fb047739494c0399a26ea4f0890
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html

07 Fixed in

Debian 12

linux
Fixed in 6.1.147-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.41-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.16.3-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.