PT-2025-28986

CVE-2025-38266

·

Published

2025-05-20

·

Updated

2026-09-14

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions:

Linux kernel (affected versions not specified)

Description:

This issue involves an invalid pointer dereference in the pinctrl: mediatek: eint subsystem for platforms using version 1 of the common driver. A commit introduced access to the soc field of the struct mtk pinctrl structure within the mtk eint do init() function. However, drivers relying on the version 1 common driver include a different definition of struct mtk pinctrl that lacks the soc field. Consequently, when mtk eint do init() is called on version 1 platforms, it attempts to dereference an invalid pointer, leading to a crash. This was observed on the Genio 350 EVK (MT8365) during early boot.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾