CVE-2025-68167

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's gpiolib component related to invalid pointer access within the debugfs interface. Specifically, if memory allocation within the gpiolib seq start() function fails, the s->private field remains uninitialized. Subsequently, this uninitialized field is dereferenced without a prior check in the gpiolib seq stop() function, leading to a potential issue. The resolution involves initializing s->private to NULL before calling kzalloc() and adding a check before dereferencing it.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.