CVE-2025-68797
Description
In the Linux kernel, the following vulnerability has been resolved: char: applicom: fix NULL pointer dereference in ac_ioctl Discovered by Atuin - Automated Vulnerability Discovery Engine. In ac_ioctl, the validation of IndexCard and the check for a valid RamIO pointer are skipped when cmd is 6. However, the function unconditionally executes readb(apbs[IndexCard].RamIO + VERS) at the end. If cmd is 6, IndexCard may reference a board that does not exist (where RamIO is NULL), leading to a NULL pointer dereference. Fix this by skipping the readb access when cmd is 6, as this command is a global information query and does not target a specific board context.
How to fix
- Linux Linux5a6240804fb7bbd4f5f6e706955248a6f4c1abbc, d1b0452280029d05a98c75631131ee61c0b0d084, 0b8b353e09888bccee405e0dd6feafb60360f478, d285517429a75423789e6408653e57b6fdfc8e54, 74883565c621eec6cd2e35fe6d27454cf2810c23, f83e3e9f89181b42f6076a115d767a7552c4a39e, 82d12088c297fa1cef670e1718b3d24f414c23f7 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 5a6240804fb7bbd4f5f6e706955248a6f4c1abbc, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < d1b0452280029d05a98c75631131ee61c0b0d084, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 0b8b353e09888bccee405e0dd6feafb60360f478, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < d285517429a75423789e6408653e57b6fdfc8e54, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 74883565c621eec6cd2e35fe6d27454cf2810c23, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < f83e3e9f89181b42f6076a115d767a7552c4a39e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 82d12088c297fa1cef670e1718b3d24f414c23f7, 2.6.12 | 5a6240804fb7bbd4f5f6e706955248a6f4c1abbc, d1b0452280029d05a98c75631131ee61c0b0d084, 0b8b353e09888bccee405e0dd6feafb60360f478, d285517429a75423789e6408653e57b6fdfc8e54, 74883565c621eec6cd2e35fe6d27454cf2810c23, f83e3e9f89181b42f6076a115d767a7552c4a39e, 82d12088c297fa1cef670e1718b3d24f414c23f7 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.