CVE-2025-68176
PCI: cadence: Check for the existence of cdns_pcie::ops before using it
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: PCI: cadence: Check for the existence of cdns_pcie::ops before using it cdns_pcie::ops might not be populated by all the Cadence glue drivers. This is going to be true for the upcoming Sophgo platform which doesn't set the ops. Hence, add a check to prevent NULL pointer dereference. [mani: reworded subject and description]
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
5.9
References 7
git.kernel.org
- stable/c/d5dbe92ac8a4ca6226093241f95f9cb1b0d2e0e1
- stable/c/eb3d29ca0820fa3d7cccad47d2da56c9ab5469ed
- stable/c/0d0bb756f002810d249caee51f3f1c309f3cdab5
- stable/c/1810b2fd7375de88a74976dcd402b29088e479ed
- stable/c/953eb3796ef06b8ea3bf6bdde14156255bc75866
- stable/c/363448d069e29685ca37a118065121e486387af3
- stable/c/49a6c160ad4812476f8ae1a8f4ed6d15adfa6c09