CVE-2025-68755

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-01-05 Modified: 2026-10-30 First seen: 2026-10-30 Status: pending_score

Description

In the Linux kernel, the following vulnerability has been resolved: staging: most: remove broken i2c driver The MOST I2C driver has been completely broken for five years without anyone noticing so remove the driver from staging. Specifically, commit 723de0f9171e ("staging: most: remove device from interface structure") started requiring drivers to set the interface device pointer before registration, but the I2C driver was never updated which results in a NULL pointer dereference if anyone ever tries to probe it.

Affected Software (7)

VendorProductVersion
Linux Linux 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c < f4cb61138482dd0b7ba551037b61f5e50a889604
Linux Linux 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c < 6cbba922934805f86eece6ba7010b7201962695d
Linux Linux 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c < 10d50bc913b69fa18a5c6fbf293c7a87962e22ef
Linux Linux 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c < 6059a66dba7f26b21852831432e17075f1a1c783
Linux Linux 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c < e463548fd80e779efea1cb2d3049b8a7231e6925
Linux Linux 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c < 495df2da6944477d282d5cc0c13174d06e25b310
Linux Linux 5.6

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.22%
Raw Score 0.002200
Percentile 12.6%
Date 2026-11-01

EPSS Trend

2026-11-01
0.00220
2026-10-31
0.00220
2026-10-30
0.00214
2026-10-29
0.00214

Intelligence Sources

mitre ref →
nvd ref →