CVE-2025-68220: net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error

Published Dec 16, 2025
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: ti: netcp: Standardize knavdmaopenchannel to return NULL on error

Make knavdmaopenchannel consistently return NULL on error instead of ERRPTR. Currently the header include/linux/soc/ti/knavdma.h returns NULL when the driver is disabled, but the driver implementation does not even return NULL or ERRPTR on failure, causing inconsistency in the users. This results in a crash in netcpfreenavigatorresources as followed (trimmed):

Unhandled fault: alignment exception (0x221) at 0xfffffff2 [fffffff2] pgd=80000800207003, pmd=82ffda003, pte=00000000 Internal error: : 221 [#1] SMP ARM Modules linked in: CPU: 0 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.17.0-rc7 #1 NONE Hardware name: Keystone PC is at knavdmaclosechannel+0x30/0x19c LR is at netcpfreenavigatorresources+0x2c/0x28c

[... TRIM...]

Call trace: knavdmaclosechannel from netcpfreenavigatorresources+0x2c/0x28c netcpfreenavigatorresources from netcpndoopen+0x430/0x46c netcpndoopen from devopen+0x114/0x29c devopen from devchangeflags+0x190/0x208 devchangeflags from netifchangeflags+0x1c/0x58 netifchangeflags from devchangeflags+0x38/0xa0 devchangeflags from ipautoconfig+0x2c4/0x11f0 ipautoconfig from dooneinitcall+0x58/0x200 dooneinitcall from kernelinitfreeable+0x1cc/0x238 kernelinitfreeable from kernelinit+0x1c/0x12c kernelinit from retfromfork+0x14/0x38 [... TRIM...]

Standardize the error handling by making the function return NULL on all error conditions. The API is used in just the netcpcore.c so the impact is limited.

Note, this change, in effect reverts commit 5b6cb43b4d62 ("net: ethernet: ti: netcpcore: return error while dma channel open issue"), but provides a less error prone implementation.

Affected Software

2 affected componentsFixes available
linux_kernel=6.17.0-rc7
Microsoft azl3 kernel 6.6.117.1-1

Event History

Dec 16, 2025
CVE Published
via MITRE·01:57 PM
Data Sourced
via MITRE·01:57 PM
Description
Data Sourced
via NVD·02:15 PM
Description
Dec 17, 2025
Data Sourced
via Microsoft·01:04 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·01:04 AM
DescriptionSeverity
Updated
via Microsoft·09:04 AM
DescriptionSeverity

Frequently Asked Questions

1

What is the severity of CVE-2025-68220?

CVE-2025-68220 is classified as a low-severity vulnerability in the Linux kernel.

2

How do I fix CVE-2025-68220?

To address CVE-2025-68220, update to the latest version of the Linux kernel where the vulnerability has been patched.

3

What does CVE-2025-68220 affect?

CVE-2025-68220 affects the Ethernet subsystem of the Linux kernel, specifically the TI netcp component.

4

Can CVE-2025-68220 lead to system crashes?

CVE-2025-68220 does not directly cause system crashes but can lead to inconsistent error handling in the affected components.

5

Is CVE-2025-68220 present in older kernel versions?

Yes, CVE-2025-68220 is present in older versions of the Linux kernel prior to the fix implemented in version 6.17.0-rc7.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203