---
id: CVE-2025-38516
title: 'pinctrl: qcom: msm: mark certain pins as invalid for interrupts'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  pinctrl: qcom: msm: mark certain pins as invalid for interrupts

  On some platforms, the UFS-reset pin has no interrupt logic in TLMM but
  is nevertheless registered as a…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= f365be0925729508fd8e62f8bdb504ef896cb6e0 <
    6a89563ccf9cd0d745e2291302878a061508573f
  - >-
    Linux >= f365be0925729508fd8e62f8bdb504ef896cb6e0 <
    3f8fc02c2582c1dfad1785e9c7bc8b4e1521af0a
  - >-
    Linux >= f365be0925729508fd8e62f8bdb504ef896cb6e0 <
    cb4b08a095b1fa4b3fca782757517e4e9a917d8e
  - >-
    Linux >= f365be0925729508fd8e62f8bdb504ef896cb6e0 <
    cc145e02d6b8494c48f91958d52fa76b7e577f7b
  - >-
    Linux >= f365be0925729508fd8e62f8bdb504ef896cb6e0 <
    1d57f7132662e96aace3b8a000616efde289aae1
  - >-
    Linux >= f365be0925729508fd8e62f8bdb504ef896cb6e0 <
    275605a8b48002fe98675a5c06f3e39c09067ff2
  - >-
    Linux >= f365be0925729508fd8e62f8bdb504ef896cb6e0 <
    97c9c7daeeb00c6e1d5e84084041f79c2d2dce22
  - >-
    Linux >= f365be0925729508fd8e62f8bdb504ef896cb6e0 <
    93712205ce2f1fb047739494c0399a26ea4f0890
  - Linux 3.14
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:57:44.975131Z'
published: '2025-08-16'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:02:40.543Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-38516'
references:
  - url: 'https://git.kernel.org/stable/c/6a89563ccf9cd0d745e2291302878a061508573f'
  - url: 'https://git.kernel.org/stable/c/3f8fc02c2582c1dfad1785e9c7bc8b4e1521af0a'
  - url: 'https://git.kernel.org/stable/c/cb4b08a095b1fa4b3fca782757517e4e9a917d8e'
  - url: 'https://git.kernel.org/stable/c/cc145e02d6b8494c48f91958d52fa76b7e577f7b'
  - url: 'https://git.kernel.org/stable/c/1d57f7132662e96aace3b8a000616efde289aae1'
  - url: 'https://git.kernel.org/stable/c/275605a8b48002fe98675a5c06f3e39c09067ff2'
  - url: 'https://git.kernel.org/stable/c/97c9c7daeeb00c6e1d5e84084041f79c2d2dce22'
  - url: 'https://git.kernel.org/stable/c/93712205ce2f1fb047739494c0399a26ea4f0890'
tags:
  - cve.org
epss: 0.00181
epssPercentile: 0.07677
ingestedAt: '2026-11-05T22:38:31.976Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: qcom: msm: mark certain pins as invalid for interrupts

On some platforms, the UFS-reset pin has no interrupt logic in TLMM but
is nevertheless registered as a GPIO in the kernel. This enables the
user-space to trigger a BUG() in the pinctrl-msm driver by running, for
example: `gpiomon -c 0 113` on RB2.

The exact culprit is requesting pins whose intr_detection_width setting
is not 1 or 2 for interrupts. This hits a BUG() in
msm_gpio_irq_set_type(). Potentially crashing the kernel due to an
invalid request from user-space is not optimal, so let's go through the
pins and mark those that would fail the check as invalid for the irq chip
as we should not even register them as available irqs.

This function can be extended if we determine that there are more
corner-cases like this.

## Affected

- `Linux >= f365be0925729508fd8e62f8bdb504ef896cb6e0 < 6a89563ccf9cd0d745e2291302878a061508573f`
- `Linux >= f365be0925729508fd8e62f8bdb504ef896cb6e0 < 3f8fc02c2582c1dfad1785e9c7bc8b4e1521af0a`
- `Linux >= f365be0925729508fd8e62f8bdb504ef896cb6e0 < cb4b08a095b1fa4b3fca782757517e4e9a917d8e`
- `Linux >= f365be0925729508fd8e62f8bdb504ef896cb6e0 < cc145e02d6b8494c48f91958d52fa76b7e577f7b`
- `Linux >= f365be0925729508fd8e62f8bdb504ef896cb6e0 < 1d57f7132662e96aace3b8a000616efde289aae1`
- `Linux >= f365be0925729508fd8e62f8bdb504ef896cb6e0 < 275605a8b48002fe98675a5c06f3e39c09067ff2`
- `Linux >= f365be0925729508fd8e62f8bdb504ef896cb6e0 < 97c9c7daeeb00c6e1d5e84084041f79c2d2dce22`
- `Linux >= f365be0925729508fd8e62f8bdb504ef896cb6e0 < 93712205ce2f1fb047739494c0399a26ea4f0890`
- `Linux 3.14`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.