{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-68434","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","state":"PUBLISHED","assignerShortName":"Linux","dateReserved":"2026-07-30T09:28:09.393Z","datePublished":"2026-08-12T00:07:21.897Z","dateUpdated":"2026-08-23T12:46:23.299Z"},"containers":{"cna":{"providerMetadata":{"orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","shortName":"Linux","dateUpdated":"2026-08-23T12:46:23.299Z"},"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nserial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms\n\nCommit b1b4efea05a5 (\"serial: 8250_mid: Disable DMA for selected\nplatforms\") replaced the dnv_board setup and exit callbacks with\nPTR_IF(false, ...), which evaluates to NULL. However, the three call\nsites in mid8250_probe() and mid8250_remove() unconditionally\ndereference these function pointers without NULL checks, causing a NULL\npointer dereference (kernel oops) on any Denverton (DNV), Ice Lake Xeon\nD (ICX-D/CDF), or Snowridge (SNR) platform.\n\nFix this by adding the missing NULL checks before calling the setup and\nexit callbacks."}],"affected":[{"product":"Linux","vendor":"Linux","defaultStatus":"unaffected","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/tty/serial/8250/8250_mid.c"],"versions":[{"version":"763d61ded752fbb3116efc951eff4363f237b7e0","lessThan":"bdaa8871b53fe9b1730ef64dda2fcd662fd83339","status":"affected","versionType":"git"},{"version":"c7d190bb07bf4e3b217c69370e94d1b4c80a40ad","lessThan":"f85a42fb90399dedcf81c146d09c07e4548b1e8c","status":"affected","versionType":"git"},{"version":"0b3ed3fa227ba778cabed96e7f8d84addb8bdf9c","lessThan":"4ea933a36a14bec19b71025cdd8407bafbd67ec1","status":"affected","versionType":"git"},{"version":"587afb06a5d1dc5092d3d9e9ac3ccf22094d50c6","lessThan":"1096397c31f6bffa95e77bdd18fbca085be83e10","status":"affected","versionType":"git"},{"version":"977855894bca4b87afa50d21e3f3e85a5a0e901f","lessThan":"600dcd548fb2b00a69f447684f52ba45d5a3540e","status":"affected","versionType":"git"},{"version":"1cd54e217c6e2cdb794a897b2f855e13ffcee586","lessThan":"b2a3eeb57ba24f8a0e34a69d40adcc63e5b9ca56","status":"affected","versionType":"git"},{"version":"9690e8a342632344984af72bc56b7a1fba61e6cb","lessThan":"8cbad52ccfa6a7f089cfab34979bc6cc3bff25be","status":"affected","versionType":"git"},{"version":"b1b4efea05a56c0995e4702a86d6624b4fdff32f","lessThan":"7fb13fd7e9a59a37cd911efff83abe19e3ee029d","status":"affected","versionType":"git"}]},{"product":"Linux","vendor":"Linux","defaultStatus":"unaffected","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/tty/serial/8250/8250_mid.c"],"versions":[{"version":"5.10.261","lessThan":"5.10.266","status":"affected","versionType":"semver"},{"version":"5.15.212","lessThan":"5.15.217","status":"affected","versionType":"semver"},{"version":"6.1.178","lessThan":"6.1.183","status":"affected","versionType":"semver"},{"version":"6.6.145","lessThan":"6.6.148","status":"affected","versionType":"semver"},{"version":"6.12.96","lessThan":"6.12.101","status":"affected","versionType":"semver"},{"version":"6.18.39","lessThan":"6.18.42","status":"affected","versionType":"semver"},{"version":"7.1.4","lessThan":"7.1.6","status":"affected","versionType":"semver"}]}],"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.10.261","versionEndExcluding":"5.10.266"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.15.212","versionEndExcluding":"5.15.217"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.178","versionEndExcluding":"6.1.183"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.6.145","versionEndExcluding":"6.6.148"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.12.96","versionEndExcluding":"6.12.101"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.18.39","versionEndExcluding":"6.18.42"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1.4","versionEndExcluding":"7.1.6"}]}]}],"references":[{"url":"https://git.kernel.org/stable/c/bdaa8871b53fe9b1730ef64dda2fcd662fd83339"},{"url":"https://git.kernel.org/stable/c/f85a42fb90399dedcf81c146d09c07e4548b1e8c"},{"url":"https://git.kernel.org/stable/c/4ea933a36a14bec19b71025cdd8407bafbd67ec1"},{"url":"https://git.kernel.org/stable/c/1096397c31f6bffa95e77bdd18fbca085be83e10"},{"url":"https://git.kernel.org/stable/c/600dcd548fb2b00a69f447684f52ba45d5a3540e"},{"url":"https://git.kernel.org/stable/c/b2a3eeb57ba24f8a0e34a69d40adcc63e5b9ca56"},{"url":"https://git.kernel.org/stable/c/8cbad52ccfa6a7f089cfab34979bc6cc3bff25be"},{"url":"https://git.kernel.org/stable/c/7fb13fd7e9a59a37cd911efff83abe19e3ee029d"}],"title":"serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms","x_generator":{"engine":"bippy-1.2.0"}}}}