Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-68434

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
12/08/2026
Última modificación:
12/08/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms<br /> <br /> Commit b1b4efea05a5 ("serial: 8250_mid: Disable DMA for selected<br /> platforms") replaced the dnv_board setup and exit callbacks with<br /> PTR_IF(false, ...), which evaluates to NULL. However, the three call<br /> sites in mid8250_probe() and mid8250_remove() unconditionally<br /> dereference these function pointers without NULL checks, causing a NULL<br /> pointer dereference (kernel oops) on any Denverton (DNV), Ice Lake Xeon<br /> D (ICX-D/CDF), or Snowridge (SNR) platform.<br /> <br /> Fix this by adding the missing NULL checks before calling the setup and<br /> exit callbacks.

Impacto