CVE-2025-21783 Details
Description
In the Linux kernel, the following vulnerability has been resolved: gpiolib: Fix crash on error in gpiochip_get_ngpios() The gpiochip_get_ngpios() uses chip_*() macros to print messages. However these macros rely on gpiodev to be initialised and set, which is not the case when called via bgpio_init(). In such a case the printing messages will crash on NULL pointer dereference. Replace chip_*() macros by the respective dev_*() ones to avoid such crash.
A vulnerability in the Linux kernel's GPIO (General Purpose Input/Output) subsystem has been addressed. The issue arose in the 'gpiochip_get_ngpios()' function, which used 'chip_*()' macros to print messages. These macros require 'gpiodev' to be initialized, a condition not met when 'bgpio_init()' is called. This mismatch led to a crash due to a NULL pointer dereference. The solution involved replacing the 'chip_*()' macros with the corresponding 'dev_*()' ones to prevent the crash.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Oct 1, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/189fb76215e479c10731baabb50f1a352d2078f5 | kernel.org | Mailing ListPatch |
| https://git.kernel.org/stable/c/4d9b2b62e1136d10f661ec4c0c268140b6f74f4f | kernel.org | Mailing ListPatch |
| https://git.kernel.org/stable/c/7b4aebeecbbd5b5fe73e35fad3f62ed21aa7ef44 | kernel.org | Mailing ListPatch |
| https://git.kernel.org/stable/c/a7052afa9eae2239e25943baa8817a6a56e8aa68 | kernel.org | Mailing ListPatch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
| CWE-476 | NULL Pointer Dereference | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.6, < 6.6.79 >= 6.7, < 6.12.16 >= 6.13, < 6.13.4 6.14 rc1 6.14 rc2 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Oct 1, 2025 | CVE Modified | CISA-ADP |
| Mar 5, 2025 | Initial Analysis | [email protected] |
| Feb 27, 2025 | New CVE Received | kernel.org |