Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.254

Description The issue concerns a potential null pointer dereference in the pinctrl subsystem for Ralink devices. It was introduced in version v4.18 and fixed in version v4.19.254. The actual impact and attack plausibility have not yet been proven.

Recommendations For versions prior to v4.19.254, update to version v4.19.254 or later to resolve the issue. As a temporary workaround, consider restricting access to the pinctrl subsystem until a patch is available.