CVE-2025-68238
Linux Kernel <5.10.247, 5.11.0-6.17.10 - NULL Pointer Dereference in Cadence NAND DMA
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: fix DMA device NULL pointer dereference The DMA device pointer `dma_dev` was being dereferenced before ensuring that `cdns_ctrl->dmac` is properly initialized. Move the assignment of `dma_dev` after successfully acquiring the DMA channel to ensure the pointer is valid before use.
References (7)
Core 7
Core References
Scores
EPSS
0.0006
EPSS Percentile
18.2%
Details
Status
published
Products (29)
linux/Kernel
< 5.10.247linux
linux/Kernel
5.11.0 - 5.15.197linux
linux/Kernel
5.16.0 - 6.1.159linux
linux/Kernel
6.13.0 - 6.17.10linux
linux/Kernel
6.2.0 - 6.6.118linux
linux/Kernel
6.7.0 - 6.12.60linux
Linux/Linux
< 6.14
Linux/Linux
099a316518508be7c57de4134ef919b2dea948ce - 9c58c64ec41290c12490ca7e1df45013fbbb41fd
Linux/Linux
0cae7c285f4771a9927ef592899234d307aea5d4 - 2178b0255eae108bb10e5e99658b28641bc06f43
Linux/Linux
0ce5416863965ddd86e066484a306867cf1e01a8 - 0c635241a62f2f5da1b48bfffae226d1f86a76ef
... and 19 more
Published
Dec 16, 2025
Tracked Since
Feb 18, 2026