CVE-2025-68797

Linux kernel - Null Pointer Dereference

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: char: applicom: fix NULL pointer dereference in ac_ioctl Discovered by Atuin - Automated Vulnerability Discovery Engine. In ac_ioctl, the validation of IndexCard and the check for a valid RamIO pointer are skipped when cmd is 6. However, the function unconditionally executes readb(apbs[IndexCard].RamIO + VERS) at the end. If cmd is 6, IndexCard may reference a board that does not exist (where RamIO is NULL), leading to a NULL pointer dereference. Fix this by skipping the readb access when cmd is 6, as this command is a global information query and does not target a specific board context.

Scores

EPSS 0.0007
EPSS Percentile 21.0%

Details

Status published
Products (22)
linux/Kernel 2.6.12 - 5.10.248linux
linux/Kernel 5.11.0 - 5.15.198linux
linux/Kernel 5.16.0 - 6.1.160linux
linux/Kernel 6.13.0 - 6.18.3linux
linux/Kernel 6.2.0 - 6.6.120linux
linux/Kernel 6.7.0 - 6.12.64linux
Linux/Linux < 2.6.12
Linux/Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 0b8b353e09888bccee405e0dd6feafb60360f478
Linux/Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 5a6240804fb7bbd4f5f6e706955248a6f4c1abbc
Linux/Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 74883565c621eec6cd2e35fe6d27454cf2810c23
... and 12 more
Published Jan 13, 2026
Tracked Since Feb 18, 2026