Riskcovery

CVE-2025-68755

staging: most: remove broken i2c driver

State
Published
Severity
Not scored
Published
Jan 5, 2026
Updated
Oct 30, 2026
Reserved
Dec 24, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: most: remove broken i2c driver

The MOST I2C driver has been completely broken for five years without anyone noticing so remove the driver from staging.

Specifically, commit 723de0f9171e ("staging: most: remove device from interface structure") started requiring drivers to set the interface device pointer before registration, but the I2C driver was never updated which results in a NULL pointer dereference if anyone ever tries to probe it.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c to before f4cb61138482dd0b7ba551037b61f5e50a889604Affected
  • 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c to before 6cbba922934805f86eece6ba7010b7201962695dAffected
  • 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c to before 10d50bc913b69fa18a5c6fbf293c7a87962e22efAffected
  • 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c to before 6059a66dba7f26b21852831432e17075f1a1c783Affected
  • 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c to before e463548fd80e779efea1cb2d3049b8a7231e6925Affected
  • 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c to before 495df2da6944477d282d5cc0c13174d06e25b310Affected
LinuxLinux
  • 5.6Affected
  • before 5.6Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.120 through 6.6.*Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.17.13 through 6.17.*Not affected
  • 6.18.2 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.