Linux Kernel Vulnerability in Rawnand DMA Device Management

CVE-2025-68238

What is CVE-2025-68238?

A vulnerability exists in the Linux kernel related to the management of DMA devices within the rawnand subsystem. The issue arises when the DMA device pointer dma_dev is dereferenced without confirming that the cdns_ctrl->dmac is properly initialized. This flaw can lead to unexpected behavior or system instability. The proper mitigation involves ensuring that the assignment of dma_dev occurs only after the successful acquisition of the DMA channel, thus providing a valid pointer before its use. This enhancement aims to safeguard against potential exploitation and improve overall system reliability.

References