PT-2025-28986
CVE-2025-38266
·
Published
2025-05-20
·
Updated
2026-09-14
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
This issue involves an invalid pointer dereference in the pinctrl: mediatek: eint subsystem for platforms using version 1 of the common driver. A commit introduced access to the
soc field of the struct mtk pinctrl structure within the mtk eint do init() function. However, drivers relying on the version 1 common driver include a different definition of struct mtk pinctrl that lacks the soc field. Consequently, when mtk eint do init() is called on version 1 platforms, it attempts to dereference an invalid pointer, leading to a crash. This was observed on the Genio 350 EVK (MT8365) during early boot.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾