Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-68434

serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.266, 5.15.217, 6.1.183, 6.6.148, 6.12.101, and 2 more
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms Commit b1b4efea05a5 ("serial: 8250_mid: Disable DMA for selected platforms") replaced the dnv_board setup and exit callbacks with PTR_IF(false, ...), which evaluates to NULL. However, the three call sites in mid8250_probe() and mid8250_remove() unconditionally dereference these function pointers without NULL checks, causing a NULL pointer dereference (kernel oops) on any Denverton (DNV), Ice Lake Xeon D (ICX-D/CDF), or Snowridge (SNR) platform. Fix this by adding the missing NULL checks before calling the setup and exit callbacks.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    Version range not reported

  • Linux Linux

    From 5.10.261 · fixed in 5.10.266; From 5.15.212 · fixed in 5.15.217; From 6.1.178 · fixed in 6.1.183; From 6.6.145 · fixed in 6.6.148; From 6.12.96 · fixed in 6.12.101; From 6.18.39 · fixed in 6.18.42; From 7.1.4 · fixed in 7.1.6

References 8

git.kernel.org