{"schema_version":"1.9.0","id":"CVE-2025-38654","published":"2025-08-22T16:00:58.153Z","modified":"2026-08-12T03:51:28.817975803Z","summary":"pinctrl: canaan: k230: Fix order of DT parse and pinctrl register","details":"In the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: canaan: k230: Fix order of DT parse and pinctrl register\n\nMove DT parse before pinctrl register. This ensures that device tree\nparsing is done before calling devm_pinctrl_register() to prevent using\nuninitialized pin resources.","affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"545887eab6f6776a7477fe7e83860eab57138b03"},{"fixed":"02c1deb1bff2b6d242e29a51e56107495979a2b8"},{"fixed":"0ec03251d01494ef207089b5bd626becfd05fd86"},{"fixed":"d94a32ac688f953dc9a9f12b5b4139ecad841bbb"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38654.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.15.10"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.16.0"},{"fixed":"6.16.1"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38654.json"}}],"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/02c1deb1bff2b6d242e29a51e56107495979a2b8"},{"type":"WEB","url":"https://git.kernel.org/stable/c/0ec03251d01494ef207089b5bd626becfd05fd86"},{"type":"WEB","url":"https://git.kernel.org/stable/c/d94a32ac688f953dc9a9f12b5b4139ecad841bbb"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38654.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38654"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38654.json"}}