CVE-2025-68755
Published: January 8, 2026Last modified: January 8, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: staging: most: remove broken i2c driver The MOST I2C driver has been completely broken for five years without anyone noticing so remove the driver from staging. Specifically, commit 723de0f9171e ("staging: most: remove device from interface structure") started requiring drivers to set the interface device pointer before registration, but the I2C driver was never updated which results in a NULL pointer dereference if anyone ever tries to probe it.
Status
| Product | Release | Package | Status |
|---|---|---|---|
| Alpaquita Linux | 23 LTS | linux-lts | Vulnerable (6.1.159-r0) |
| 25 LTS | linux-lts | Vulnerable (6.12.61-r0) | |
| Stream | linux-lts | Vulnerable (6.12.63-r0) |