CVE-2025-68755: staging: most: remove broken i2c driver
In the Linux kernel, the following vulnerability has been resolved:
staging: most: remove broken i2c driver
The MOST I2C driver has been completely broken for five years without anyone noticing so remove the driver from staging.
Specifically, commit 723de0f9171e ("staging: most: remove device from interface structure") started requiring drivers to set the interface device pointer before registration, but the I2C driver was never updated which results in a NULL pointer dereference if anyone ever tries to probe it.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68755?
CVE-2025-68755 is considered a low severity vulnerability as it involves the removal of a broken i2c driver that has been non-functional for five years.
How do I fix CVE-2025-68755?
To address CVE-2025-68755, simply update your Linux kernel to the latest version where the broken MOST I2C driver has been removed.
What impacts does CVE-2025-68755 have on the Linux Kernel?
CVE-2025-68755 has minimal impact since it removes a non-working driver and does not affect system functionality or security.
Who is affected by CVE-2025-68755?
CVE-2025-68755 affects users and systems utilizing the Linux kernel that previously included the broken MOST I2C driver.
What is the nature of the vulnerability defined in CVE-2025-68755?
CVE-2025-68755 is a maintenance-related vulnerability focused on the removal of an outdated and broken driver from the Linux kernel.