CVE-2026-68434

CVE-2026-68434

published August 12, 2026

CVSS
—
EPSS
0%
Percentile
6.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms

Commit b1b4efea05a5 ("serial: 8250_mid: Disable DMA for selected

platforms") replaced the dnv_board setup and exit callbacks with

PTR_IF(false, ...), which evaluates to NULL. However, the three call

sites in mid8250_probe() and mid8250_remove() unconditionally

dereference these function pointers without NULL checks, causing a NULL

pointer dereference (kernel oops) on any Denverton (DNV), Ice Lake Xeon

D (ICX-D/CDF), or Snowridge (SNR) platform.

Fix this by adding the missing NULL checks before calling the setup and

exit callbacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00177 · 6.9th percentile
Published
2026-08-12T04:17Z
References (8)
EPSS history
Timeline
  • 12 AUG 00:07Z
    serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms
    cvelistv5