CVE-2026-68434 PUBLISHED

serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms

Assigner: Linux
Reserved: 30.07.2026 Published: 12.08.2026 Updated: 12.08.2026

In the Linux kernel, the following vulnerability has been resolved:

serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms

Commit b1b4efea05a5 ("serial: 8250_mid: Disable DMA for selected platforms") replaced the dnv_board setup and exit callbacks with PTR_IF(false, ...), which evaluates to NULL. However, the three call sites in mid8250_probe() and mid8250_remove() unconditionally dereference these function pointers without NULL checks, causing a NULL pointer dereference (kernel oops) on any Denverton (DNV), Ice Lake Xeon D (ICX-D/CDF), or Snowridge (SNR) platform.

Fix this by adding the missing NULL checks before calling the setup and exit callbacks.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 587afb06a5d1dc5092d3d9e9ac3ccf22094d50c6 to 1096397c31f6bffa95e77bdd18fbca085be83e10 (excl.)
  • affected from 977855894bca4b87afa50d21e3f3e85a5a0e901f to 600dcd548fb2b00a69f447684f52ba45d5a3540e (excl.)
  • affected from 1cd54e217c6e2cdb794a897b2f855e13ffcee586 to b2a3eeb57ba24f8a0e34a69d40adcc63e5b9ca56 (excl.)
  • affected from 9690e8a342632344984af72bc56b7a1fba61e6cb to 8cbad52ccfa6a7f089cfab34979bc6cc3bff25be (excl.)
  • affected from b1b4efea05a56c0995e4702a86d6624b4fdff32f to 7fb13fd7e9a59a37cd911efff83abe19e3ee029d (excl.)
  • Version 763d61ded752fbb3116efc951eff4363f237b7e0 is affected
  • Version c7d190bb07bf4e3b217c69370e94d1b4c80a40ad is affected
  • Version 0b3ed3fa227ba778cabed96e7f8d84addb8bdf9c is affected
  • affected from 6.6.145 to 6.6.148 (excl.)
  • affected from 6.12.96 to 6.12.101 (excl.)
  • affected from 6.18.39 to 6.18.42 (excl.)
  • affected from 7.1.4 to 7.1.6 (excl.)
  • affected from 5.10.261 to 5.11 (excl.)
  • affected from 5.15.212 to 5.16 (excl.)
  • affected from 6.1.178 to 6.2 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 7.2-rc3 is affected
  • unaffected from 0 to 7.2-rc3 (excl.)
  • unaffected from 6.6.148 to 6.6.* (incl.)
  • unaffected from 6.12.101 to 6.12.* (incl.)
  • unaffected from 6.18.42 to 6.18.* (incl.)
  • unaffected from 7.1.6 to 7.1.* (incl.)
  • unaffected from 7.2-rc5 to * (incl.)

References