Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-68176

In the Linux kernel, the following vulnerability has been resolved: PCI: cadence: Check for the existence of cdns_pcie::ops before using it cdns_pcie::ops might not be populated by all the Cadence glue drivers. This is going to be true for the upcoming Sophgo platform which doesn't set the ops. Hence, add a check to prevent NULL pointer dereference. [mani: reworded subject and description]
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:b4d9f78c64f191bce66c9b41f72a7f175c04e886538c9e5fb0989a4f27a644aa
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/pci/controller/cadence/pcie-cadence-host.c","drivers/pci/controller/cadence/pcie-cadence.c","drivers/pci/controller/cadence/pcie-cadence.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.9"},{"lessThan":"5.9","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.247","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.197","ve…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ddf266a057d58b0261a54e2183cb27707e39db232da5903bf3b06127eb0ba65a · sha256:5f8c77ce57584de5… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/pci/controller/cadence/pcie-cadence-host.c","drivers/pci/controller/cadence/pcie-cadence.c","drivers/pci/controller/cadence/pcie-cadence.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"d5dbe92ac8a4ca6226093241f95f9cb1b0d2e0e1","status":"affected","version":"40d957e6f9eb3a8a585007b8b730340c829afbdb","versionType":"git"},{"lessThan":"eb3d29ca0820fa3d7cccad47d2da56c9ab5469ed","status":"affected","version":"40d957e6f9eb3a8a585007b8b730340c829afbdb","versi…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ddf266a057d58b0261a54e2183cb27707e39db232da5903bf3b06127eb0ba65a · sha256:5f8c77ce57584de5… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/pci/controller/cadence/pcie-cadence-host.c","drivers/pci/controller/cadence/pcie-cadence.c","drivers/pci/controller/cadence/pcie-cadence.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.9"},{"lessThan":"5.9","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.247","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.197","ve…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ddf266a057d58b0261a54e2183cb27707e39db232da5903bf3b06127eb0ba65a · sha256:5f8c77ce57584de5… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/pci/controller/cadence/pcie-cadence-host.c","drivers/pci/controller/cadence/pcie-cadence.c","drivers/pci/controller/cadence/pcie-cadence.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"d5dbe92ac8a4ca6226093241f95f9cb1b0d2e0e1","status":"affected","version":"40d957e6f9eb3a8a585007b8b730340c829afbdb","versionType":"git"},{"lessThan":"eb3d29ca0820fa3d7cccad47d2da56c9ab5469ed","status":"affected","version":"40d957e6f9eb3a8a585007b8b730340c829afbdb","versi…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ddf266a057d58b0261a54e2183cb27707e39db232da5903bf3b06127eb0ba65a · sha256:5f8c77ce57584de5… · /containers/cna/affected/0

Source references

7 source assertions
{"url":"https://git.kernel.org/stable/c/0d0bb756f002810d249caee51f3f1c309f3cdab5"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ddf266a057d58b0261a54e2183cb27707e39db232da5903bf3b06127eb0ba65a · sha256:5f8c77ce57584de5… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/1810b2fd7375de88a74976dcd402b29088e479ed"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ddf266a057d58b0261a54e2183cb27707e39db232da5903bf3b06127eb0ba65a · sha256:5f8c77ce57584de5… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/363448d069e29685ca37a118065121e486387af3"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ddf266a057d58b0261a54e2183cb27707e39db232da5903bf3b06127eb0ba65a · sha256:5f8c77ce57584de5… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/49a6c160ad4812476f8ae1a8f4ed6d15adfa6c09"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ddf266a057d58b0261a54e2183cb27707e39db232da5903bf3b06127eb0ba65a · sha256:5f8c77ce57584de5… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/953eb3796ef06b8ea3bf6bdde14156255bc75866"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ddf266a057d58b0261a54e2183cb27707e39db232da5903bf3b06127eb0ba65a · sha256:5f8c77ce57584de5… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/d5dbe92ac8a4ca6226093241f95f9cb1b0d2e0e1"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ddf266a057d58b0261a54e2183cb27707e39db232da5903bf3b06127eb0ba65a · sha256:5f8c77ce57584de5… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/eb3d29ca0820fa3d7cccad47d2da56c9ab5469ed"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ddf266a057d58b0261a54e2183cb27707e39db232da5903bf3b06127eb0ba65a · sha256:5f8c77ce57584de5… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer