CVE-2025-68238

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to a null pointer dereference within the cadence rawnand module during Direct Memory Access (DMA) operations. Specifically, the DMA device pointer dma dev was being dereferenced before confirming proper initialization of cdns ctrl->dmac. This issue was addressed by moving the assignment of dma dev to occur after successfully acquiring the DMA channel, ensuring the pointer's validity before use.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.