{"id":"CVE-2026-68434","summary":"serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nserial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms\n\nCommit b1b4efea05a5 (\"serial: 8250_mid: Disable DMA for selected\nplatforms\") replaced the dnv_board setup and exit callbacks with\nPTR_IF(false, ...), which evaluates to NULL. However, the three call\nsites in mid8250_probe() and mid8250_remove() unconditionally\ndereference these function pointers without NULL checks, causing a NULL\npointer dereference (kernel oops) on any Denverton (DNV), Ice Lake Xeon\nD (ICX-D/CDF), or Snowridge (SNR) platform.\n\nFix this by adding the missing NULL checks before calling the setup and\nexit callbacks.","modified":"2026-09-18T10:11:52.606929116Z","published":"2026-08-12T00:07:21.897Z","related":["SUSE-SU-2026:23477-1","SUSE-SU-2026:23481-1","SUSE-SU-2026:23528-1","SUSE-SU-2026:23529-1","SUSE-SU-2026:4120-1","SUSE-SU-2026:4254-1"],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68434.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/1096397c31f6bffa95e77bdd18fbca085be83e10"},{"type":"WEB","url":"https://git.kernel.org/stable/c/4ea933a36a14bec19b71025cdd8407bafbd67ec1"},{"type":"WEB","url":"https://git.kernel.org/stable/c/600dcd548fb2b00a69f447684f52ba45d5a3540e"},{"type":"WEB","url":"https://git.kernel.org/stable/c/7fb13fd7e9a59a37cd911efff83abe19e3ee029d"},{"type":"WEB","url":"https://git.kernel.org/stable/c/8cbad52ccfa6a7f089cfab34979bc6cc3bff25be"},{"type":"WEB","url":"https://git.kernel.org/stable/c/b2a3eeb57ba24f8a0e34a69d40adcc63e5b9ca56"},{"type":"WEB","url":"https://git.kernel.org/stable/c/bdaa8871b53fe9b1730ef64dda2fcd662fd83339"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f85a42fb90399dedcf81c146d09c07e4548b1e8c"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68434.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68434"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"763d61ded752fbb3116efc951eff4363f237b7e0"},{"fixed":"bdaa8871b53fe9b1730ef64dda2fcd662fd83339"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"c7d190bb07bf4e3b217c69370e94d1b4c80a40ad"},{"fixed":"f85a42fb90399dedcf81c146d09c07e4548b1e8c"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"0b3ed3fa227ba778cabed96e7f8d84addb8bdf9c"},{"fixed":"4ea933a36a14bec19b71025cdd8407bafbd67ec1"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"587afb06a5d1dc5092d3d9e9ac3ccf22094d50c6"},{"fixed":"1096397c31f6bffa95e77bdd18fbca085be83e10"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"977855894bca4b87afa50d21e3f3e85a5a0e901f"},{"fixed":"600dcd548fb2b00a69f447684f52ba45d5a3540e"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"1cd54e217c6e2cdb794a897b2f855e13ffcee586"},{"fixed":"b2a3eeb57ba24f8a0e34a69d40adcc63e5b9ca56"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"9690e8a342632344984af72bc56b7a1fba61e6cb"},{"fixed":"8cbad52ccfa6a7f089cfab34979bc6cc3bff25be"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"b1b4efea05a56c0995e4702a86d6624b4fdff32f"},{"fixed":"7fb13fd7e9a59a37cd911efff83abe19e3ee029d"}]}],"versions":["v5.10.265","v5.10.264","v5.10.263","v5.10.262","v5.10.261","v5.15.216","v5.15.215","v5.15.214","v5.15.213","v5.15.212","v6.1.182","v6.1.181","v6.1.180","v6.1.179","v6.1.178","v6.6.147","v6.6.146","v6.6.145","v6.12.100","v6.12.99","v6.12.98","v6.12.97","v6.12.96","v6.18.41","v6.18.40","v6.18.39","v7.1.5","v7.1.4"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-68434.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.10.261"},{"fixed":"5.10.266"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.15.212"},{"fixed":"5.15.217"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.1.178"},{"fixed":"6.1.183"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.6.145"},{"fixed":"6.6.148"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.12.96"},{"fixed":"6.12.101"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.18.39"},{"fixed":"6.18.42"}]},{"type":"ECOSYSTEM","events":[{"introduced":"7.1.4"},{"fixed":"7.1.6"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-68434.json"}}],"schema_version":"1.9.0"}