CVE-2025-68238
Description
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: fix DMA device NULL pointer dereference The DMA device pointer `dma_dev` was being dereferenced before ensuring that `cdns_ctrl->dmac` is properly initialized. Move the assignment of `dma_dev` after successfully acquiring the DMA channel to ensure the pointer is valid before use.
How to fix
- Linux Linux2178b0255eae108bb10e5e99658b28641bc06f43, 9c58c64ec41290c12490ca7e1df45013fbbb41fd, e282a4fdf3c6ee842a720010a8b5f7d77bedd126, b146e0b085d9d6bfe838e0a15481cba7d093c67f, 0c635241a62f2f5da1b48bfffae226d1f86a76ef, 0c2a43cb43786011b48eeab6093db14888258c6b, 5c56bf214af85ca042bf97f8584aab2151035840, 5.10.247, 5.15.197, 6.1.159, 6.6.118, 6.12.60, 6.14 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 0cae7c285f4771a9927ef592899234d307aea5d4 ≤ v < 2178b0255eae108bb10e5e99658b28641bc06f43, 099a316518508be7c57de4134ef919b2dea948ce ≤ v < 9c58c64ec41290c12490ca7e1df45013fbbb41fd, e630d32162a8aab92d4aaebae0a8d93039257593 ≤ v < e282a4fdf3c6ee842a720010a8b5f7d77bedd126, ad9393467fbd788ac2b8a01e492e45ab1b68a1b1 ≤ v < b146e0b085d9d6bfe838e0a15481cba7d093c67f, 0ce5416863965ddd86e066484a306867cf1e01a8 ≤ v < 0c635241a62f2f5da1b48bfffae226d1f86a76ef, d76d22b5096c5b05208fd982b153b3f182350b19 ≤ v < 0c2a43cb43786011b48eeab6093db14888258c6b, d76d22b5096c5b05208fd982b153b3f182350b19 ≤ v < 5c56bf214af85ca042bf97f8584aab2151035840, a33c7492dcdf804b705b6c21018a481414d48038, 5.10.235 ≤ v < 5.10.247, 5.15.179 ≤ v < 5.15.197, 6.1.130 ≤ v < 6.1.159, 6.6.80 ≤ v < 6.6.118, 6.12.17 ≤ v < 6.12.60, 6.13.5 ≤ v < 6.14, 6.14 | 2178b0255eae108bb10e5e99658b28641bc06f43, 9c58c64ec41290c12490ca7e1df45013fbbb41fd, e282a4fdf3c6ee842a720010a8b5f7d77bedd126, b146e0b085d9d6bfe838e0a15481cba7d093c67f, 0c635241a62f2f5da1b48bfffae226d1f86a76ef, 0c2a43cb43786011b48eeab6093db14888258c6b, 5c56bf214af85ca042bf97f8584aab2151035840, 5.10.247, 5.15.197, 6.1.159, 6.6.118, 6.12.60, 6.14 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.