AUGUST 18, 2026
Live Feed
Back to database
Case File

CVE-2026-68434

UNKNOWN · CVSS N/A EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-08-12 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel on Denverton, Ice Lake Xeon D, and Snowridge platforms, where a NULL pointer dereference occurs due to improper handling of function pointers in the mid8250_probe() and mid8250_remove() functions. This can lead to kernel crashes, impacting system stability and availability. System administrators and organizations using the affected platforms should prioritize applying the fix to mitigate potential disruptions.

CVE
CVE-2026-68434
Severity
UNKNOWN
CVSS
N/A
EPSS
0.17%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms Commit b1b4efea05a5 ("serial: 8250_mid: Disable DMA for selected platforms") replaced the dnv_board setup and exit callbacks with PTR_IF(false, ...), which evaluates to NULL. However, the three call sites in mid8250_probe() and mid8250_remove() unconditionally dereference these function pointers without NULL checks, causing a NULL pointer dereference (kernel oops) on any Denverton (DNV), Ice Lake Xeon D (ICX-D/CDF), or Snowridge (SNR) platform. Fix this by adding the missing NULL checks before calling the setup and exit callbacks.