CVE-2025-40030

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the pinctrl subsystem where the return value of the pinmux ops::get function name() function is not adequately checked. The pinmux generic get function name() implementation can return NULL, which, if not checked, can lead to a NULL pointer dereference when passed to strcmp(). This occurs within the pinmux func name to selector() function. The issue arises because the API contract does not explicitly require checking for a NULL return value from get function name().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.