CVE-2025-68755
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
05/01/2026
Last modified:
05/01/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
staging: most: remove broken i2c driver<br />
<br />
The MOST I2C driver has been completely broken for five years without<br />
anyone noticing so remove the driver from staging.<br />
<br />
Specifically, commit 723de0f9171e ("staging: most: remove device from<br />
interface structure") started requiring drivers to set the interface<br />
device pointer before registration, but the I2C driver was never updated<br />
which results in a NULL pointer dereference if anyone ever tries to<br />
probe it.



