I2C Driver Vulnerability in Linux Kernel Affects Multiple Systems

CVE-2025-68755

What is CVE-2025-68755?

A vulnerability in the Linux kernel's I2C driver has emerged due to the deprecation of the MOST I2C driver, which had remained broken for five years. The problem stems from the requirement that drivers must set the interface device pointer before registration, a standard not followed by the I2C driver. Consequently, this oversight leads to a NULL pointer dereference when the driver is probed, potentially causing system instability and security risks as it could allow for uncontrolled behavior in affected systems. System administrators are advised to review affected configurations and consider implementing immediate updates.

References