CVE-2025-68176

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: PCI: cadence: Check for the existence of cdns_pcie::ops before using it cdns_pcie::ops might not be populated by all the Cadence glue drivers. This is going to be true for the upcoming Sophgo platform which doesn't set the ops. Hence, add a check to prevent NULL pointer dereference. [mani: reworded subject and description]

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedDec 16, 2025
First seenDec 16, 2025

How to fix

Update
  • Linux Linuxd5dbe92ac8a4ca6226093241f95f9cb1b0d2e0e1, eb3d29ca0820fa3d7cccad47d2da56c9ab5469ed, 0d0bb756f002810d249caee51f3f1c309f3cdab5, 1810b2fd7375de88a74976dcd402b29088e479ed, 953eb3796ef06b8ea3bf6bdde14156255bc75866, 363448d069e29685ca37a118065121e486387af3, 49a6c160ad4812476f8ae1a8f4ed6d15adfa6c09 or later

Affected products

ProductAffected versionsFixed in
Linux Linux40d957e6f9eb3a8a585007b8b730340c829afbdb ≤ v < d5dbe92ac8a4ca6226093241f95f9cb1b0d2e0e1, 40d957e6f9eb3a8a585007b8b730340c829afbdb ≤ v < eb3d29ca0820fa3d7cccad47d2da56c9ab5469ed, 40d957e6f9eb3a8a585007b8b730340c829afbdb ≤ v < 0d0bb756f002810d249caee51f3f1c309f3cdab5, 40d957e6f9eb3a8a585007b8b730340c829afbdb ≤ v < 1810b2fd7375de88a74976dcd402b29088e479ed, 40d957e6f9eb3a8a585007b8b730340c829afbdb ≤ v < 953eb3796ef06b8ea3bf6bdde14156255bc75866, 40d957e6f9eb3a8a585007b8b730340c829afbdb ≤ v < 363448d069e29685ca37a118065121e486387af3, 40d957e6f9eb3a8a585007b8b730340c829afbdb ≤ v < 49a6c160ad4812476f8ae1a8f4ed6d15adfa6c09, 5.9d5dbe92ac8a4ca6226093241f95f9cb1b0d2e0e1, eb3d29ca0820fa3d7cccad47d2da56c9ab5469ed, 0d0bb756f002810d249caee51f3f1c309f3cdab5, 1810b2fd7375de88a74976dcd402b29088e479ed, 953eb3796ef06b8ea3bf6bdde14156255bc75866, 363448d069e29685ca37a118065121e486387af3, 49a6c160ad4812476f8ae1a8f4ed6d15adfa6c09

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.