serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms
Summary
| CVE | CVE-2026-68434 |
|---|
| State | PUBLISHED |
|---|
| Assigner | Linux |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2026-08-12 00:17:43 UTC |
|---|
| Updated | 2026-08-12 00:17:43 UTC |
|---|
| Description | In the Linux kernel, the following vulnerability has been resolved:
serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms
Commit b1b4efea05a5 ("serial: 8250_mid: Disable DMA for selected
platforms") replaced the dnv_board setup and exit callbacks with
PTR_IF(false, ...), which evaluates to NULL. However, the three call
sites in mid8250_probe() and mid8250_remove() unconditionally
dereference these function pointers without NULL checks, causing a NULL
pointer dereference (kernel oops) on any Denverton (DNV), Ice Lake Xeon
D (ICX-D/CDF), or Snowridge (SNR) platform.
Fix this by adding the missing NULL checks before calling the setup and
exit callbacks. |
|---|
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|
| CNA |
Linux |
Linux |
affected 587afb06a5d1dc5092d3d9e9ac3ccf22094d50c6 1096397c31f6bffa95e77bdd18fbca085be83e10 git |
Not specified |
| CNA |
Linux |
Linux |
affected 977855894bca4b87afa50d21e3f3e85a5a0e901f 600dcd548fb2b00a69f447684f52ba45d5a3540e git |
Not specified |
| CNA |
Linux |
Linux |
affected 1cd54e217c6e2cdb794a897b2f855e13ffcee586 b2a3eeb57ba24f8a0e34a69d40adcc63e5b9ca56 git |
Not specified |
| CNA |
Linux |
Linux |
affected 9690e8a342632344984af72bc56b7a1fba61e6cb 8cbad52ccfa6a7f089cfab34979bc6cc3bff25be git |
Not specified |
| CNA |
Linux |
Linux |
affected b1b4efea05a56c0995e4702a86d6624b4fdff32f 7fb13fd7e9a59a37cd911efff83abe19e3ee029d git |
Not specified |
| CNA |
Linux |
Linux |
affected 763d61ded752fbb3116efc951eff4363f237b7e0 git |
Not specified |
| CNA |
Linux |
Linux |
affected c7d190bb07bf4e3b217c69370e94d1b4c80a40ad git |
Not specified |
| CNA |
Linux |
Linux |
affected 0b3ed3fa227ba778cabed96e7f8d84addb8bdf9c git |
Not specified |
| CNA |
Linux |
Linux |
affected 6.6.145 6.6.148 semver |
Not specified |
| CNA |
Linux |
Linux |
affected 6.12.96 6.12.101 semver |
Not specified |
| CNA |
Linux |
Linux |
affected 6.18.39 6.18.42 semver |
Not specified |
| CNA |
Linux |
Linux |
affected 7.1.4 7.1.6 semver |
Not specified |
| CNA |
Linux |
Linux |
affected 5.10.261 5.11 semver |
Not specified |
| CNA |
Linux |
Linux |
affected 5.15.212 5.16 semver |
Not specified |
| CNA |
Linux |
Linux |
affected 6.1.178 6.2 semver |
Not specified |
| CNA |
Linux |
Linux |
affected 7.2-rc3 |
Not specified |
| CNA |
Linux |
Linux |
unaffected 7.2-rc3 semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.6.148 6.6.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.12.101 6.12.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.18.42 6.18.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 7.1.6 7.1.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 7.2-rc5 * original_commit_for_fix |
Not specified |
References
| Reference | Source | Link | Tags |
|---|
| git.kernel.org/stable/c/600dcd548fb2b00a69f447684f52ba45d5a3540e |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/1096397c31f6bffa95e77bdd18fbca085be83e10 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/b2a3eeb57ba24f8a0e34a69d40adcc63e5b9ca56 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/7fb13fd7e9a59a37cd911efff83abe19e3ee029d |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/8cbad52ccfa6a7f089cfab34979bc6cc3bff25be |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.