CVE-2025-68755

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-68755", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2025-12-24T10:30:51.033Z", "datePublished": "2026-01-05T09:32:29.149Z", "dateUpdated": "2026-10-30T12:23:19.033Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-30T12:23:19.033Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: most: remove broken i2c driver\n\nThe MOST I2C driver has been completely broken for five years without\nanyone noticing so remove the driver from staging.\n\nSpecifically, commit 723de0f9171e (\"staging: most: remove device from\ninterface structure\") started requiring drivers to set the interface\ndevice pointer before registration, but the I2C driver was never updated\nwhich results in a NULL pointer dereference if anyone ever tries to\nprobe it."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/staging/most/Kconfig", "drivers/staging/most/Makefile", "drivers/staging/most/i2c/Kconfig", "drivers/staging/most/i2c/Makefile", "drivers/staging/most/i2c/i2c.c"], "versions": [{"version": "723de0f9171eeb49a3ae98cae82ebbbb992b3a7c", "lessThan": "f4cb61138482dd0b7ba551037b61f5e50a889604", "status": "affected", "versionType": "git"}, {"version": "723de0f9171eeb49a3ae98cae82ebbbb992b3a7c", "lessThan": "6cbba922934805f86eece6ba7010b7201962695d", "status": "affected", "versionType": "git"}, {"version": "723de0f9171eeb49a3ae98cae82ebbbb992b3a7c", "lessThan": "10d50bc913b69fa18a5c6fbf293c7a87962e22ef", "status": "affected", "versionType": "git"}, {"version": "723de0f9171eeb49a3ae98cae82ebbbb992b3a7c", "lessThan": "6059a66dba7f26b21852831432e17075f1a1c783", "status": "affected", "versionType": "git"}, {"version": "723de0f9171eeb49a3ae98cae82ebbbb992b3a7c", "lessThan": "e463548fd80e779efea1cb2d3049b8a7231e6925", "status": "affected", "versionType": "git"}, {"version": "723de0f9171eeb49a3ae98cae82ebbbb992b3a7c", "lessThan": "495df2da6944477d282d5cc0c13174d06e25b310", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/staging/most/Kconfig", "drivers/staging/most/Makefile", "drivers/staging/most/i2c/Kconfig", "drivers/staging/most/i2c/Makefile", "drivers/staging/most/i2c/i2c.c"], "versions": [{"version": "5.6", "status": "affected"}, {"version": "0", "lessThan": "5.6", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.191", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.120", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.114", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.17.13", "lessThanOrEqual": "6.17.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.2", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.6", "versionEndExcluding": "6.1.191"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.6", "versionEndExcluding": "6.6.120"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.6", "versionEndExcluding": "6.12.114"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.6", "versionEndExcluding": "6.17.13"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.6", "versionEndExcluding": "6.18.2"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.6", "versionEndExcluding": "6.19"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/f4cb61138482dd0b7ba551037b61f5e50a889604"}, {"url": "https://git.kernel.org/stable/c/6cbba922934805f86eece6ba7010b7201962695d"}, {"url": "https://git.kernel.org/stable/c/10d50bc913b69fa18a5c6fbf293c7a87962e22ef"}, {"url": "https://git.kernel.org/stable/c/6059a66dba7f26b21852831432e17075f1a1c783"}, {"url": "https://git.kernel.org/stable/c/e463548fd80e779efea1cb2d3049b8a7231e6925"}, {"url": "https://git.kernel.org/stable/c/495df2da6944477d282d5cc0c13174d06e25b310"}], "title": "staging: most: remove broken i2c driver", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/staging/most/Kconfig", "drivers/staging/most/Makefile", "drivers/staging/most/i2c/Kconfig", "drivers/staging/most/i2c/Makefile", "drivers/staging/most/i2c/i2c.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "f4cb61138482dd0b7ba551037b61f5e50a889604", "status": "affected", "version": "723de0f9171eeb49a3ae98cae82ebbbb992b3a7c", "versionType": "git"}, {"lessThan": "6cbba922934805f86eece6ba7010b7201962695d", "status": "affected", "version": "723de0f9171eeb49a3ae98cae82ebbbb992b3a7c", "versionType": "git"}, {"lessThan": "10d50bc913b69fa18a5c6fbf293c7a87962e22ef", "status": "affected", "version": "723de0f9171eeb49a3ae98cae82ebbbb992b3a7c", "versionType": "git"}, {"lessThan": "6059a66dba7f26b21852831432e17075f1a1c783", "status": "affected", "version": "723de0f9171eeb49a3ae98cae82ebbbb992b3a7c", "versionType": "git"}, {"lessThan": "e463548fd80e779efea1cb2d3049b8a7231e6925", "status": "affected", "version": "723de0f9171eeb49a3ae98cae82ebbbb992b3a7c", "versionType": "git"}, {"lessThan": "495df2da6944477d282d5cc0c13174d06e25b310", "status": "affected", "version": "723de0f9171eeb49a3ae98cae82ebbbb992b3a7c", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/staging/most/Kconfig", "drivers/staging/most/Makefile", "drivers/staging/most/i2c/Kconfig", "drivers/staging/most/i2c/Makefile", "drivers/staging/most/i2c/i2c.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.6"}, {"lessThan": "5.6", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.191", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.120", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.114", "versionType": "semver"}, {"lessThanOrEqual": "6.17.*", "status": "unaffected", "version": "6.17.13", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.2", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "6.19", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: most: remove broken i2c driver\n\nThe MOST I2C driver has been completely broken for five years without\nanyone noticing so remove the driver from staging.\n\nSpecifically, commit 723de0f9171e (\"staging: most: remove device from\ninterface structure\") started requiring drivers to set the interface\ndevice pointer before registration, but the I2C driver was never updated\nwhich results in a NULL pointer dereference if anyone ever tries to\nprobe it."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nstaging: most: eliminar controlador i2c roto\n\nEl controlador MOST I2C ha estado completamente roto durante cinco a\u00f1os sin que nadie se diera cuenta, as\u00ed que se elimina el controlador de staging.\n\nEspec\u00edficamente, el commit 723de0f9171e ('staging: most: eliminar dispositivo de la estructura de interfaz') comenz\u00f3 a requerir que los controladores establecieran el puntero del dispositivo de interfaz antes del registro, pero el controlador I2C nunca fue actualizado, lo que resulta en una desreferencia de puntero NULL si alguien alguna vez intenta sondearlo."}], "id": "CVE-2025-68755", "lastModified": "2026-10-30T13:18:23.770", "metrics": {}, "published": "2026-01-05T10:15:56.543", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/10d50bc913b69fa18a5c6fbf293c7a87962e22ef"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/495df2da6944477d282d5cc0c13174d06e25b310"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6059a66dba7f26b21852831432e17075f1a1c783"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6cbba922934805f86eece6ba7010b7201962695d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/e463548fd80e779efea1cb2d3049b8a7231e6925"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f4cb61138482dd0b7ba551037b61f5e50a889604"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Deferred"}

{"bugzilla": {"description": "kernel: staging: most: remove broken i2c driver", "id": "2427119", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427119"}, "csaw": false, "details": ["No description is available for this CVE."], "name": "CVE-2025-68755", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-01-05T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2025-68755\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-68755\nhttps://lore.kernel.org/linux-cve-announce/2026010549-CVE-2025-68755-b588@gregkh/T"]}

{}