CVE-2026-68434
INFO
Priority: 0.00
BB Relevance:
0/100
Published: 2026-08-12
Modified: 2026-11-06
First seen: 2026-11-06
Status: pending_score
Description
In the Linux kernel, the following vulnerability has been resolved: serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms Commit b1b4efea05a5 ("serial: 8250_mid: Disable DMA for selected platforms") replaced the dnv_board setup and exit callbacks with PTR_IF(false, ...), which evaluates to NULL. However, the three call sites in mid8250_probe() and mid8250_remove() unconditionally dereference these function pointers without NULL checks, causing a NULL pointer dereference (kernel oops) on any Denverton (DNV), Ice Lake Xeon D (ICX-D/CDF), or Snowridge (SNR) platform. Fix this by adding the missing NULL checks before calling the setup and exit callbacks.
Affected Software (15)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 763d61ded752fbb3116efc951eff4363f237b7e0 < bdaa8871b53fe9b1730ef64dda2fcd662fd83339 |
| Linux | Linux | c7d190bb07bf4e3b217c69370e94d1b4c80a40ad < f85a42fb90399dedcf81c146d09c07e4548b1e8c |
| Linux | Linux | 0b3ed3fa227ba778cabed96e7f8d84addb8bdf9c < 4ea933a36a14bec19b71025cdd8407bafbd67ec1 |
| Linux | Linux | 587afb06a5d1dc5092d3d9e9ac3ccf22094d50c6 < 1096397c31f6bffa95e77bdd18fbca085be83e10 |
| Linux | Linux | 977855894bca4b87afa50d21e3f3e85a5a0e901f < 600dcd548fb2b00a69f447684f52ba45d5a3540e |
| Linux | Linux | 1cd54e217c6e2cdb794a897b2f855e13ffcee586 < b2a3eeb57ba24f8a0e34a69d40adcc63e5b9ca56 |
| Linux | Linux | 9690e8a342632344984af72bc56b7a1fba61e6cb < 8cbad52ccfa6a7f089cfab34979bc6cc3bff25be |
| Linux | Linux | b1b4efea05a56c0995e4702a86d6624b4fdff32f < 7fb13fd7e9a59a37cd911efff83abe19e3ee029d |
| Linux | Linux | 5.10.261 < 5.10.266 |
| Linux | Linux | 5.15.212 < 5.15.217 |
| Linux | Linux | 6.1.178 < 6.1.183 |
| Linux | Linux | 6.6.145 < 6.6.148 |
| Linux | Linux | 6.12.96 < 6.12.101 |
| Linux | Linux | 6.18.39 < 6.18.42 |
| Linux | Linux | 7.1.4 < 7.1.6 |