CVE-2025-68176

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw where cdns pcie::ops may not be populated by all Cadence glue drivers, potentially leading to a NULL pointer dereference. This is anticipated to occur on the upcoming Sophgo platform, as it does not set the ops. A check has been added to prevent this issue. There is no information about the number of potentially affected devices or any real-world incidents where this issue was exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.