cve 2025 40030

CVE-2025-40030 is a Linux kernel vulnerability in the pin control (pinctrl) subsystem that addresses a potential NULL-pointer dereference. The fix adds a missing NULL check when calling the pinmux_ops::get_function_name callback, preventing a returned NULL pointer from being passed to strcmp and causing a kernel crash. The upstream patch is a one-line defensive fix that improves stability on affected platforms. This CVE is relevant for Linux system administrators and developers managing kernel security, particularly those using pinctrl functionality. The patch is already included in stable kernel trees and downstream trackers.