SB20260812153 - NULL pointer dereference in Linux kernel dpll driver

Description

This security bulletin contains information about 1 vulnerability.

1) NULL pointer dereference (CVE-ID: CVE-2026-68378)

CWE-ID: CWE-476 - NULL Pointer Dereference

CVSSv4: 5.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to a null pointer dereference in dpll_msg_add_pin_ref_sync() when handling dpll pin unregistration events for shared pins with ref_sync pairs. A local user can trigger unregistration of affected dpll devices to cause a denial of service.

The issue occurs when a pin is registered with multiple dpll devices and a ref_sync partner has already been removed from the current device's pin references while remaining registered with another device.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/4b3e6b9fdaeb40c6a2f7c41db3888b6ee628bdd2
• https://git.kernel.org/stable/c/51c2fcc4cd2e4c52bd1970558f6e5356fdc51154
• https://git.kernel.org/stable/c/66fbe0499ef517ab161b96c49886a891851f6481
• https://git.kernel.org/stable/c/d2e914a4a0d0f753dbae830264850d044026167c