CVE-2025-68238
Published Dec 16, 2025
Modified Apr 15, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: fix DMA device NULL pointer dereference The DMA device pointer `dma_dev` was being dereferenced before ensuring that `cdns_ctrl->dmac` is properly initialized. Move the assignment of `dma_dev` after successfully acquiring the DMA channel to ensure the pointer is valid before use.
Is your site exposed to CVE-2025-68238?
Run a free security scan — no signup, results in seconds.
References
Other References
https://git.kernel.org/stable/c/0c2a43cb43786011b48eeab6093db14888258c6b
https://git.kernel.org/stable/c/0c635241a62f2f5da1b48bfffae226d1f86a76ef
https://git.kernel.org/stable/c/2178b0255eae108bb10e5e99658b28641bc06f43
https://git.kernel.org/stable/c/5c56bf214af85ca042bf97f8584aab2151035840
https://git.kernel.org/stable/c/9c58c64ec41290c12490ca7e1df45013fbbb41fd
https://git.kernel.org/stable/c/b146e0b085d9d6bfe838e0a15481cba7d093c67f
https://git.kernel.org/stable/c/e282a4fdf3c6ee842a720010a8b5f7d77bedd126
Frequently Asked Questions
What is CVE-2025-68238? +
In the Linux kernel, the following vulnerability has been resolved:
mtd: rawnand: cadence: fix DMA device NULL pointer dereference
The DMA device pointer `dma_dev` was being dereferenced before ensuring
that `cdns_ctrl->dmac` is properly initialized.
Move the assignment of `dma_dev` after successfully acquiring the DMA
channel to ensure the pointer is valid before use.
How do I check if I'm vulnerable to CVE-2025-68238? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.