Skip to content
Heist/ feed
UnratedFix available

serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms

Type: advisorySource: OSV1 source record

In the Linux kernel, the following vulnerability has been resolved: serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms Commit b1b4efea05a5 ("serial: 8250_mid: Disable DMA for selected platforms") replaced the dnv_board setup and exit callbacks with PTR_IF(false, ...), which evaluates to NULL. However, the three call sites in mid8250_probe() and mid8250_remove() unconditionally dereference these function pointers without NULL checks, causing a NULL pointer dereference (kernel oops) on any Denverton (DNV), Ice Lake Xeon D (ICX-D/CDF), or Snowridge (SNR) platform. Fix this by adding the missing NULL checks before calling the setup and exit callbacks.

Announced Group revision 1
Original source ↗

CVE-2026-68434

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:CVE-2026-68434

Kernel

Source reference: /affected/1/package/name

Affected versions
Not stated in this record
Fixed versions
5.10.266

Source reference: /affected/1/ranges

5.15.217

Source reference: /affected/1/ranges

6.1.183

Source reference: /affected/1/ranges

6.6.148

Source reference: /affected/1/ranges

6.12.101

Source reference: /affected/1/ranges

6.18.42

Source reference: /affected/1/ranges

7.1.6

Source reference: /affected/1/ranges

Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "ranges": [
      {
        "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
        "type": "GIT",
        "events": [
          {
            "introduced": "763d61ded752fbb3116efc951eff4363f237b7e0"
          },
          {
            "fixed": "bdaa8871b53fe9b1730ef64dda2fcd662fd83339"
          }
        ]
      },
      {
        "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
        "type": "GIT",
        "events": [
          {
            "introduced": "c7d190bb07bf4e3b217c69370e94d1b4c80a40ad"
          },
          {
            "fixed": "f85a42fb90399dedcf81c146d09c07e4548b1e8c"
          }
        ]
      },
      {
        "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
        "type": "GIT",
        "events": [
          {
            "introduced": "0b3ed3fa227ba778cabed96e7f8d84addb8bdf9c"
          },
          {
            "fixed": "4ea933a36a14bec19b71025cdd8407bafbd67ec1"
          }
        ]
      },
      {
        "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
        "type": "GIT",
        "events": [
          {
            "introduced": "587afb06a5d1dc5092d3d9e9ac3ccf22094d50c6"
          },
          {
            "fixed": "1096397c31f6bffa95e77bdd18fbca085be83e10"
          }
        ]
      },
      {
        "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
        "type": "GIT",
        "events": [
          {
            "introduced": "977855894bca4b87afa50d21e3f3e85a5a0e901f"
          },
          {
            "fixed": "600dcd548fb2b00a69f447684f52ba45d5a3540e"
          }
        ]
      },
      {
        "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
        "type": "GIT",
        "events": [
          {
            "introduced": "1cd54e217c6e2cdb794a897b2f855e13ffcee586"
          },
          {
            "fixed": "b2a3eeb57ba24f8a0e34a69d40adcc63e5b9ca56"
          }
        ]
      },
      {
        "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
        "type": "GIT",
        "events": [
          {
            "introduced": "9690e8a342632344984af72bc56b7a1fba61e6cb"
          },
          {
            "fixed": "8cbad52ccfa6a7f089cfab34979bc6cc3bff25be"
          }
        ]
      },
      {
        "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
        "type": "GIT",
        "events": [
          {
            "introduced": "b1b4efea05a56c0995e4702a86d6624b4fdff32f"
          },
          {
            "fixed": "7fb13fd7e9a59a37cd911efff83abe19e3ee029d"
          }
        ]
      }
    ],
    "versions": [
      "v5.10.265",
      "v5.10.264",
      "v5.10.263",
      "v5.10.262",
      "v5.10.261",
      "v5.15.216",
      "v5.15.215",
      "v5.15.214",
      "v5.15.213",
      "v5.15.212",
      "v6.1.182",
      "v6.1.181",
      "v6.1.180",
      "v6.1.179",
      "v6.1.178",
      "v6.6.147",
      "v6.6.146",
      "v6.6.145",
      "v6.12.100",
      "v6.12.99",
      "v6.12.98",
      "v6.12.97",
      "v6.12.96",
      "v6.18.41",
      "v6.18.40",
      "v6.18.39",
      "v7.1.5",
      "v7.1.4"
    ],
    "database_specific": {
      "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-68434.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "5.10.261"
          },
          {
            "fixed": "5.10.266"
          }
        ]
      },
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "5.15.212"
          },
          {
            "fixed": "5.15.217"
          }
        ]
      },
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "6.1.178"
          },
          {
            "fixed": "6.1.183"
          }
        ]
      },
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "6.6.145"
          },
          {
            "fixed": "6.6.148"
          }
        ]
      },
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "6.12.96"
          },
          {
            "fixed": "6.12.101"
          }
        ]
      },
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "6.18.39"
          },
          {
            "fixed": "6.18.42"
          }
        ]
      },
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "7.1.4"
          },
          {
            "fixed": "7.1.6"
          }
        ]
      }
    ],
    "package": {
      "name": "Kernel",
      "ecosystem": "Linux"
    },
    "database_specific": {
      "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-68434.json"
    }
  }
]
Related CVEs
CVE-2026-68434

Source reference: /id

Publisher severity

No explicit severity was provided.

Event
#50819 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement