CVE-2025-68187 net: mdio: Check regmap pointer returned by device_node_to_regmap()
A missing error check in the Airoha MDIO driver can cause a kernel crash if regmap initialization fails, leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-68187?
CVE-2025-68187 is a vulnerability in Linux, published on 16 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
net: mdio: Check regmap pointer returned by device_node_to_regmap()
The call to device_node_to_regmap() in airoha_mdio_probe() can return an ERR_PTR() if regmap initialization fails. Currently, the driver stores the pointer without validation, which could lead to a crash if it is later dereferenced.
Add an IS_ERR() check and return the corresponding error code to make the probe path more robust.
Which versions are affected by CVE-2025-68187?
How do I fix CVE-2025-68187?
Apply the vendor's patch.
Is CVE-2025-68187 being exploited?
There is no known exploitation of CVE-2025-68187 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2025-68187, DEBIAN-CVE-2025-68187, GHSA-j4j4-wgmj-58wh, UBUNTU-CVE-2025-68187.