Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-68238

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: fix DMA device NULL pointer dereference The DMA device pointer `dma_dev` was being dereferenced before ensuring that `cdns_ctrl->dmac` is properly initialized. Move the assignment of `dma_dev` after successfully acquiring the DMA channel to ensure the pointer is valid before use.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:706192793b8bd99f62c311b7cf5243332427fab7400337759dcaac67fb7aa545
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/mtd/nand/raw/cadence-nand-controller.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"2178b0255eae108bb10e5e99658b28641bc06f43","status":"affected","version":"0cae7c285f4771a9927ef592899234d307aea5d4","versionType":"git"},{"lessThan":"9c58c64ec41290c12490ca7e1df45013fbbb41fd","status":"affected","version":"099a316518508be7c57de4134ef919b2dea948ce","versionType":"git"},{"lessThan":"e282a4fdf3c6ee842a720010a8b5f7d77bedd126","status":"affected","version":…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ca633c8e5d5949bdbc96615a36d7a142ad9da4ad17070a50876d63268a04a8d6 · sha256:712a206faec05eef… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/mtd/nand/raw/cadence-nand-controller.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.14"},{"lessThan":"6.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.247","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.197","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.159","version…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ca633c8e5d5949bdbc96615a36d7a142ad9da4ad17070a50876d63268a04a8d6 · sha256:712a206faec05eef… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/mtd/nand/raw/cadence-nand-controller.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"2178b0255eae108bb10e5e99658b28641bc06f43","status":"affected","version":"0cae7c285f4771a9927ef592899234d307aea5d4","versionType":"git"},{"lessThan":"9c58c64ec41290c12490ca7e1df45013fbbb41fd","status":"affected","version":"099a316518508be7c57de4134ef919b2dea948ce","versionType":"git"},{"lessThan":"e282a4fdf3c6ee842a720010a8b5f7d77bedd126","status":"affected","version":…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ca633c8e5d5949bdbc96615a36d7a142ad9da4ad17070a50876d63268a04a8d6 · sha256:712a206faec05eef… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/mtd/nand/raw/cadence-nand-controller.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.14"},{"lessThan":"6.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.247","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.197","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.159","version…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ca633c8e5d5949bdbc96615a36d7a142ad9da4ad17070a50876d63268a04a8d6 · sha256:712a206faec05eef… · /containers/cna/affected/1

Source references

7 source assertions
{"url":"https://git.kernel.org/stable/c/0c2a43cb43786011b48eeab6093db14888258c6b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ca633c8e5d5949bdbc96615a36d7a142ad9da4ad17070a50876d63268a04a8d6 · sha256:712a206faec05eef… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/0c635241a62f2f5da1b48bfffae226d1f86a76ef"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ca633c8e5d5949bdbc96615a36d7a142ad9da4ad17070a50876d63268a04a8d6 · sha256:712a206faec05eef… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/2178b0255eae108bb10e5e99658b28641bc06f43"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ca633c8e5d5949bdbc96615a36d7a142ad9da4ad17070a50876d63268a04a8d6 · sha256:712a206faec05eef… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/5c56bf214af85ca042bf97f8584aab2151035840"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ca633c8e5d5949bdbc96615a36d7a142ad9da4ad17070a50876d63268a04a8d6 · sha256:712a206faec05eef… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/9c58c64ec41290c12490ca7e1df45013fbbb41fd"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ca633c8e5d5949bdbc96615a36d7a142ad9da4ad17070a50876d63268a04a8d6 · sha256:712a206faec05eef… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/b146e0b085d9d6bfe838e0a15481cba7d093c67f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ca633c8e5d5949bdbc96615a36d7a142ad9da4ad17070a50876d63268a04a8d6 · sha256:712a206faec05eef… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/e282a4fdf3c6ee842a720010a8b5f7d77bedd126"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ca633c8e5d5949bdbc96615a36d7a142ad9da4ad17070a50876d63268a04a8d6 · sha256:712a206faec05eef… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer