In the Linux kernel, the following vulnerability has been resolved:

staging: most: remove broken i2c driver

The MOST I2C driver has been completely broken for five years without
anyone noticing so remove the driver from staging.

Specifically, commit 723de0f9171e ("staging: most: remove device from
interface structure") started requiring drivers to set the interface
device pointer before registration, but the I2C driver was never updated
which results in a NULL pointer dereference if anyone ever tries to
probe it.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00025.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
723de0f9171eeb49a3ae98cae82ebbbb992b3a7c affected < 6cbba922934805f86eece6ba7010b7201962695d
723de0f9171eeb49a3ae98cae82ebbbb992b3a7c affected < 6059a66dba7f26b21852831432e17075f1a1c783
723de0f9171eeb49a3ae98cae82ebbbb992b3a7c affected < e463548fd80e779efea1cb2d3049b8a7231e6925
723de0f9171eeb49a3ae98cae82ebbbb992b3a7c affected < 495df2da6944477d282d5cc0c13174d06e25b310
Linux Linux affected
Version Status Constraints
5.6 affected —
0 unaffected < 5.6
6.6.120 unaffected ≤ 6.6.*
6.17.13 unaffected ≤ 6.17.*
6.18.2 unaffected ≤ 6.18.*
6.19 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/495df2da6944477d282d5cc0c13174d06e25b310 cve-icon cve-icon
https://git.kernel.org/stable/c/6059a66dba7f26b21852831432e17075f1a1c783 cve-icon cve-icon
https://git.kernel.org/stable/c/6cbba922934805f86eece6ba7010b7201962695d cve-icon cve-icon
https://git.kernel.org/stable/c/e463548fd80e779efea1cb2d3049b8a7231e6925 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2026010549-CVE-2025-68755-b588@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-68755 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-68755 cve-icon
History

Sun, 11 Jan 2026 16:45:00 +0000

Type Values Removed Values Added
References

Tue, 06 Jan 2026 00:15:00 +0000

Type Values Removed Values Added
References

Mon, 05 Jan 2026 10:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: staging: most: remove broken i2c driver The MOST I2C driver has been completely broken for five years without anyone noticing so remove the driver from staging. Specifically, commit 723de0f9171e ("staging: most: remove device from interface structure") started requiring drivers to set the interface device pointer before registration, but the I2C driver was never updated which results in a NULL pointer dereference if anyone ever tries to probe it.
Title staging: most: remove broken i2c driver
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-02-09T08:32:59.408Z

Reserved: 2025-12-24T10:30:51.033Z

Link: CVE-2025-68755

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-01-05T10:15:56.543

Modified: 2026-01-11T17:15:58.170

Link: CVE-2025-68755

cve-icon Redhat

Severity :

Publid Date: 2026-01-05T00:00:00Z

Links: CVE-2025-68755 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.