CVE-2025-68187: net: mdio: Check regmap pointer returned by device_node_to_regmap()
In the Linux kernel, the following vulnerability has been resolved:
net: mdio: Check regmap pointer returned by devicenodetoregmap()
The call to devicenodetoregmap() in airohamdioprobe() can return an ERRPTR() if regmap initialization fails. Currently, the driver stores the pointer without validation, which could lead to a crash if it is later dereferenced.
Add an ISERR() check and return the corresponding error code to make the probe path more robust.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68187?
CVE-2025-68187 is classified as a medium-severity vulnerability involving regmap pointer handling in the Linux kernel.
How do I fix CVE-2025-68187?
To fix CVE-2025-68187, update your Linux kernel to a version where the vulnerability has been patched.
What impact does CVE-2025-68187 have on system security?
CVE-2025-68187 may lead to potential device instability or failure during the initialization of the MDIO driver.
Which versions of the Linux kernel are affected by CVE-2025-68187?
CVE-2025-68187 affects various versions of the Linux kernel that incorporate the faulty MDIO driver handling.
Is CVE-2025-68187 being actively exploited?
As of now, there are no known active exploits for CVE-2025-68187, but it is advisable to apply the security update.