In the Linux kernel, the following vulnerability has been resolved:
pinctrl: canaan: k230: add NULL check in DT parse
Add a NULL check for the return value of of_get_property() when retrieving the "pinmux" property in the group parser. This avoids a potential NULL pointer dereference if the property is missing from the device tree node.
Also fix a typo ("sintenel") in the device ID match table comment, correcting it to "sentinel".
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-azureUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-raspiUpgrade linux-image-virtual-6.14Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-aws-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-realtimeUpgrade linux-image-aws-64k-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-raspi-6.14Upgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-aws-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1017-awsUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-oem-6.14Upgrade linux-image-virtualUpgrade linux-image-oem-24.04Upgrade linux-image-genericUpgrade linux-image-azure-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1017-aws-64k | Nov 25, 2025 | Nov 21, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub