Not yet scoredPublished Dec 16, 2025

CVE-2025-68176PCI: cadence: Check for the existence of cdns_pcie::ops before using it

Updated under an hour ago (Oct 27, 2026, 2:50 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: PCI: cadence: Check for the existence of cdns_pcie::ops before using it cdns_pcie::ops might not be populated by all the Cadence glue drivers. This is going to be true for the upcoming Sophgo platform which doesn't set the ops. Hence, add a check to prevent NULL pointer dereference. [mani: reworded subject and description]

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 40d957e6f9eb3a8a585007b8b730340c829afbdb before d5dbe92ac8a4ca6226093241f95f9cb1b0d2e0e1; from 40d957e6f9eb3a8a585007b8b730340c829afbdb before eb3d29ca0820fa3d7cccad47d2da56c9ab5469ed; 40d957e6f9eb3a8a585007b8b730340c829afbdb builds before 0d0bb756f002810d249caee51f3f1c309f3cdab5; from 40d957e6f9eb3a8a585007b8b730340c829afbdb before 1810b2fd7375de88a74976dcd402b29088e479ed; from 40d957e6f9eb3a8a585007b8b730340c829afbdb before 953eb3796ef06b8ea3bf6bdde14156255bc75866; from 40d957e6f9eb3a8a585007b8b730340c829afbdb before 363448d069e29685ca37a118065121e486387af3; from 40d957e6f9eb3a8a585007b8b730340c829afbdb before 49a6c160ad4812476f8ae1a8f4ed6d15adfa6c09	CNA record

References

References

https://git.kernel.org/stable/c/d5dbe92ac8a4ca6226093241f95f9cb1b0d2e0e1
https://git.kernel.org/stable/c/eb3d29ca0820fa3d7cccad47d2da56c9ab5469ed
https://git.kernel.org/stable/c/0d0bb756f002810d249caee51f3f1c309f3cdab5
https://git.kernel.org/stable/c/1810b2fd7375de88a74976dcd402b29088e479ed
https://git.kernel.org/stable/c/953eb3796ef06b8ea3bf6bdde14156255bc75866
https://git.kernel.org/stable/c/363448d069e29685ca37a118065121e486387af3
https://git.kernel.org/stable/c/49a6c160ad4812476f8ae1a8f4ed6d15adfa6c09

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.