CVE-2025-68238: mtd: rawnand: cadence: fix DMA device NULL pointer dereference
In the Linux kernel, the following vulnerability has been resolved:
mtd: rawnand: cadence: fix DMA device NULL pointer dereference
The DMA device pointer dmadev was being dereferenced before ensuring that cdnsctrl->dmac is properly initialized.
Move the assignment of dmadev after successfully acquiring the DMA channel to ensure the pointer is valid before use.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68238?
CVE-2025-68238 has a medium severity rating due to the potential for denial of service through NULL pointer dereference.
How do I fix CVE-2025-68238?
To fix CVE-2025-68238, update the Linux kernel to the latest version that includes the patch for this vulnerability.
What systems are affected by CVE-2025-68238?
CVE-2025-68238 affects all versions of the Linux kernel with the rawnand driver where the DMA device pointer is not properly initialized.
What attacks can exploit CVE-2025-68238?
CVE-2025-68238 could potentially be exploited to crash the system or cause instability due to a NULL pointer dereference.
Is CVE-2025-68238 related to the Linux kernel MTD subsystem?
Yes, CVE-2025-68238 is specifically related to the MTD (Memory Technology Devices) subsystem in the Linux kernel.