Findings

CVE-2025-68238

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: fix DMA device NULL pointer dereference The DMA device pointer was being der…

Published Dec 16, 2025 · updated Oct 14, 2026

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: fix DMA device NULL pointer dereference The DMA device pointer was being dereferenced before ensuring that is properly initialized. Move the assignment of after successfully acquiring the DMA channel to ensure the pointer is valid before use.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Dec 16, 2025 · NIST NVD

    Detected

    In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: fix DMA device NULL pointer dereference The DMA device pointer was being dereferenced before ensuring that is properly initialized. Move the assignment of after successfully acquiring the DMA channel to ensure the pointer is valid before use.

  2. Oct 14, 2026 · NIST NVD

    Updated

    In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: fix DMA device NULL pointer dereference The DMA device pointer was being dereferenced before ensuring that is properly initialized. Move the assignment of after successfully acquiring the DMA channel to ensure the pointer is valid before use.

Sources

  • CVE.orgVulnerability recordCVE-2025-68238

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2025-68238

    30-day exploitation probability 0.2%

    first.org
  • NIST NVDVulnerability recordCVE-2025-68238

    In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: fix DMA device NULL pointer dereference The DMA device pointer was being dereferenced before ensuring that is properly initialized. Move the assignment of `dm

    nvd.nist.gov

References