CVE-2025-68755
Description
In the Linux kernel, the following vulnerability has been resolved: staging: most: remove broken i2c driver The MOST I2C driver has been completely broken for five years without anyone noticing so remove the driver from staging. Specifically, commit 723de0f9171e ("staging: most: remove device from interface structure") started requiring drivers to set the interface device pointer before registration, but the I2C driver was never updated which results in a NULL pointer dereference if anyone ever tries to probe it.
How to fix
- Linux Linuxf4cb61138482dd0b7ba551037b61f5e50a889604, 6cbba922934805f86eece6ba7010b7201962695d, 10d50bc913b69fa18a5c6fbf293c7a87962e22ef, 6059a66dba7f26b21852831432e17075f1a1c783, e463548fd80e779efea1cb2d3049b8a7231e6925, 495df2da6944477d282d5cc0c13174d06e25b310 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c ≤ v < f4cb61138482dd0b7ba551037b61f5e50a889604, 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c ≤ v < 6cbba922934805f86eece6ba7010b7201962695d, 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c ≤ v < 10d50bc913b69fa18a5c6fbf293c7a87962e22ef, 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c ≤ v < 6059a66dba7f26b21852831432e17075f1a1c783, 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c ≤ v < e463548fd80e779efea1cb2d3049b8a7231e6925, 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c ≤ v < 495df2da6944477d282d5cc0c13174d06e25b310, 5.6 | f4cb61138482dd0b7ba551037b61f5e50a889604, 6cbba922934805f86eece6ba7010b7201962695d, 10d50bc913b69fa18a5c6fbf293c7a87962e22ef, 6059a66dba7f26b21852831432e17075f1a1c783, e463548fd80e779efea1cb2d3049b8a7231e6925, 495df2da6944477d282d5cc0c13174d06e25b310 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.