HomeDefectsLIN1025-6559
Acknowledged

LIN1025-6559 : Security Advisory - linux - CVE-2025-68222

Created: Dec 16, 2025    Updated: Dec 18, 2025
Found In Version: 10.25.33.1
Severity: Standard
Applicable for: Wind River Linux LTS 25
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:[EOL][EOL]pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc[EOL][EOL]s32_pinctrl_desc is allocated with devm_kmalloc(), but not all of its[EOL]fields are initialized. Notably, num_custom_params is used in[EOL]pinconf_generic_parse_dt_config(), resulting in intermittent allocation[EOL]errors, such as the following splat when probing i2c-imx:[EOL][EOL]        WARNING: CPU: 0 PID: 176 at mm/page_alloc.c:4795 __alloc_pages_noprof+0x290/0x300[EOL]        [...][EOL]        Hardware name: NXP S32G3 Reference Design Board 3 (S32G-VNP-RDB3) (DT)[EOL]        [...][EOL]        Call trace:[EOL]         __alloc_pages_noprof+0x290/0x300 (P)[EOL]         ___kmalloc_large_node+0x84/0x168[EOL]         __kmalloc_large_node_noprof+0x34/0x120[EOL]         __kmalloc_noprof+0x2ac/0x378[EOL]         pinconf_generic_parse_dt_config+0x68/0x1a0[EOL]         s32_dt_node_to_map+0x104/0x248[EOL]         dt_to_map_one_config+0x154/0x1d8[EOL]         pinctrl_dt_to_map+0x12c/0x280[EOL]         create_pinctrl+0x6c/0x270[EOL]         pinctrl_get+0xc0/0x170[EOL]         devm_pinctrl_get+0x50/0xa0[EOL]         pinctrl_bind_pins+0x60/0x2a0[EOL]         really_probe+0x60/0x3a0[EOL]        [...][EOL]         __platform_driver_register+0x2c/0x40[EOL]         i2c_adap_imx_init+0x28/0xff8 [i2c_imx][EOL]        [...][EOL][EOL]This results in later parse failures that can cause issues in dependent[EOL]drivers:[EOL][EOL]        s32g-siul2-pinctrl 4009c240.pinctrl: /soc@0/pinctrl@4009c240/i2c0-pins/i2c0-grp0: could not parse node property[EOL]        s32g-siul2-pinctrl 4009c240.pinctrl: /soc@0/pinctrl@4009c240/i2c0-pins/i2c0-grp0: could not parse node property[EOL]        [...][EOL]        pca953x 0-0022: failed writing register: -6[EOL]        i2c i2c-0: IMX I2C adapter registered[EOL]        s32g-siul2-pinctrl 4009c240.pinctrl: /soc@0/pinctrl@4009c240/i2c2-pins/i2c2-grp0: could not parse node property[EOL]        s32g-siul2-pinctrl 4009c240.pinctrl: /soc@0/pinctrl@4009c240/i2c2-pins/i2c2-grp0: could not parse node property[EOL]        i2c i2c-1: IMX I2C adapter registered[EOL]        s32g-siul2-pinctrl 4009c240.pinctrl: /soc@0/pinctrl@4009c240/i2c4-pins/i2c4-grp0: could not parse node property[EOL]        s32g-siul2-pinctrl 4009c240.pinctrl: /soc@0/pinctrl@4009c240/i2c4-pins/i2c4-grp0: could not parse node property[EOL]        i2c i2c-2: IMX I2C adapter registered[EOL][EOL]Fix this by initializing s32_pinctrl_desc with devm_kzalloc() instead of[EOL]devm_kmalloc() in s32_pinctrl_probe(), which sets the previously[EOL]uninitialized fields to zero.
Live chat
Online