CVE-2025-68238

CVE-2025-68238

published December 16, 2025

CVSS
—
EPSS
0%
Percentile
8.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

mtd: rawnand: cadence: fix DMA device NULL pointer dereference

The DMA device pointer `dma_dev` was being dereferenced before ensuring

that `cdns_ctrl->dmac` is properly initialized.

Move the assignment of `dma_dev` after successfully acquiring the DMA

channel to ensure the pointer is valid before use.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00191 · 8.3th percentile
Published
2025-12-16T19:15Z
References (7)
https://git.kernel.org/stable/c/0c2a43cb43786011b48eeab6093db14888258c6b · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/0c635241a62f2f5da1b48bfffae226d1f86a76ef · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/2178b0255eae108bb10e5e99658b28641bc06f43 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/5c56bf214af85ca042bf97f8584aab2151035840 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9c58c64ec41290c12490ca7e1df45013fbbb41fd · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b146e0b085d9d6bfe838e0a15481cba7d093c67f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e282a4fdf3c6ee842a720010a8b5f7d77bedd126 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 16 DEC 14:08Z
    mtd: rawnand: cadence: fix DMA device NULL pointer dereference
    cvelistv5