Skip to main content
VulnerabilityPublished Updated

CVE-2026-68434: Linux kernel · serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms

Affects Linux kernelSource CVE Database V5

0
Compare

Not known to be exploited · fixed in f85a42fb90399dedcf81c146d09c07e4548b1e8c : update Linux kernel when convenient.

Data as of 6 Nov 2026, 17:19 UTC

Severity
Unrated

Rated by Threat Radar · No CVSS score from NVD or the CNA

Thin evidence

One scorer or none
CISA SSVC
Exploitation
No evidence of active exploitation and no public proof of concept
Automatable
Attackers cannot reliably automate steps 1–4 of the kill chain
Technical impact
Limited control over the software or limited information exposure

CISA SSVC assessment, 2026-11-06.

Patch
Available – fixed in f85a42fb90399dedcf81c146d09c07e4548b1e8c, bdaa8871b53fe9b1730ef64dda2fcd662fd83339, b2a3eeb57ba24f8a0e34a69d40adcc63e5b9ca56 +12

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 12 Aug 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 6 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ c7d190bb07bf4e3b217c69370e94d1b4c80a40ad, < f85a42fb90399dedcf81c146d09c07e4548b1e8c
Fixed in
  • f85a42fb90399dedcf81c146d09c07e4548b1e8c
LinuxLinuxAffected
  • ≥ 763d61ded752fbb3116efc951eff4363f237b7e0, < bdaa8871b53fe9b1730ef64dda2fcd662fd83339
Fixed in
  • bdaa8871b53fe9b1730ef64dda2fcd662fd83339
LinuxLinuxAffected
  • ≥ 1cd54e217c6e2cdb794a897b2f855e13ffcee586, < b2a3eeb57ba24f8a0e34a69d40adcc63e5b9ca56
Fixed in
  • b2a3eeb57ba24f8a0e34a69d40adcc63e5b9ca56
LinuxLinuxAffected
  • ≥ 587afb06a5d1dc5092d3d9e9ac3ccf22094d50c6, < 1096397c31f6bffa95e77bdd18fbca085be83e10
Fixed in
  • 1096397c31f6bffa95e77bdd18fbca085be83e10
LinuxLinuxAffected
  • ≥ 977855894bca4b87afa50d21e3f3e85a5a0e901f, < 600dcd548fb2b00a69f447684f52ba45d5a3540e
Fixed in
  • 600dcd548fb2b00a69f447684f52ba45d5a3540e
LinuxLinuxAffected
  • ≥ 9690e8a342632344984af72bc56b7a1fba61e6cb, < 8cbad52ccfa6a7f089cfab34979bc6cc3bff25be
Fixed in
  • 8cbad52ccfa6a7f089cfab34979bc6cc3bff25be

Description

In the Linux kernel, the following vulnerability has been resolved: serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms Commit b1b4efea05a5 ("serial: 8250_mid: Disable DMA for selected platforms") replaced the dnv_board setup and exit callbacks with PTR_IF(false, ...), which evaluates to NULL. However, the three call sites in mid8250_probe() and mid8250_remove() unconditionally dereference these function pointers without NULL checks, causing a NULL pointer dereference (kernel oops) on any Denverton (DNV), Ice Lake Xeon D (ICX-D/CDF), or Snowridge (SNR) platform. Fix this by adding the missing NULL checks before calling the setup and exit callbacks.

References

Community reviews

Loading reviews…