Vulnerability in Linux

CVE-2025-68238

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: fix DMA device NULL pointer dereference The DMA device pointer `dma_dev` was being dereferenced before ensuring that `cdns_ctrl->dmac` is properly initialized. Move the assignment of `dma_dev` after successfully acquiring the DMA channel to ensure the pointer is valid before use.

EPSS: 0.002 (6.4th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 6.12.60, 0cae7c285f4771a9927ef592899234d307aea5d4, 5.10.247

References