CVE-2025-38632

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A race condition in the pinmux functionality can lead to a NULL pointer dereference. This occurs due to improper handling of mux usecount and mux owner updates when multiple processes access the same GPIO pin concurrently. Specifically, the issue arises from interleaving operations in pin request() and pin free() functions, where mux owner can be set to NULL while mux usecount is still greater than zero, potentially causing a crash on subsequent requests for the same pin. The root cause is non-atomic updates to mux usecount and mux owner.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.