CVE-2025-68238

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: fix DMA device NULL pointer dereference The DMA device pointer `dma_dev` was being dereferenced before ensuring that `cdns_ctrl->dmac` is properly initialized. Move the assignment of `dma_dev` after successfully acquiring the DMA channel to ensure the pointer is valid before use.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedDec 16, 2025
First seenDec 16, 2025

How to fix

Update
  • Linux Linux2178b0255eae108bb10e5e99658b28641bc06f43, 9c58c64ec41290c12490ca7e1df45013fbbb41fd, e282a4fdf3c6ee842a720010a8b5f7d77bedd126, b146e0b085d9d6bfe838e0a15481cba7d093c67f, 0c635241a62f2f5da1b48bfffae226d1f86a76ef, 0c2a43cb43786011b48eeab6093db14888258c6b, 5c56bf214af85ca042bf97f8584aab2151035840, 5.10.247, 5.15.197, 6.1.159, 6.6.118, 6.12.60, 6.14 or later

Affected products

ProductAffected versionsFixed in
Linux Linux0cae7c285f4771a9927ef592899234d307aea5d4 ≤ v < 2178b0255eae108bb10e5e99658b28641bc06f43, 099a316518508be7c57de4134ef919b2dea948ce ≤ v < 9c58c64ec41290c12490ca7e1df45013fbbb41fd, e630d32162a8aab92d4aaebae0a8d93039257593 ≤ v < e282a4fdf3c6ee842a720010a8b5f7d77bedd126, ad9393467fbd788ac2b8a01e492e45ab1b68a1b1 ≤ v < b146e0b085d9d6bfe838e0a15481cba7d093c67f, 0ce5416863965ddd86e066484a306867cf1e01a8 ≤ v < 0c635241a62f2f5da1b48bfffae226d1f86a76ef, d76d22b5096c5b05208fd982b153b3f182350b19 ≤ v < 0c2a43cb43786011b48eeab6093db14888258c6b, d76d22b5096c5b05208fd982b153b3f182350b19 ≤ v < 5c56bf214af85ca042bf97f8584aab2151035840, a33c7492dcdf804b705b6c21018a481414d48038, 5.10.235 ≤ v < 5.10.247, 5.15.179 ≤ v < 5.15.197, 6.1.130 ≤ v < 6.1.159, 6.6.80 ≤ v < 6.6.118, 6.12.17 ≤ v < 6.12.60, 6.13.5 ≤ v < 6.14, 6.142178b0255eae108bb10e5e99658b28641bc06f43, 9c58c64ec41290c12490ca7e1df45013fbbb41fd, e282a4fdf3c6ee842a720010a8b5f7d77bedd126, b146e0b085d9d6bfe838e0a15481cba7d093c67f, 0c635241a62f2f5da1b48bfffae226d1f86a76ef, 0c2a43cb43786011b48eeab6093db14888258c6b, 5c56bf214af85ca042bf97f8584aab2151035840, 5.10.247, 5.15.197, 6.1.159, 6.6.118, 6.12.60, 6.14

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.