net: ravb: avoid dereferencing an invalid PTP clock (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.17 % · percentile 6 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: net: ravb: avoid dereferencing an invalid PTP clock The PTP clock is unavailable before the first open, so querying its index can dereference a NULL pointer. Registration failures can also leave an error pointer in priv->ptp.clock. Cache the PHC index separately and report -1 while no clock is registered. Normalize registration errors to NULL and preserve the static timestamping capabilities.
References
- https://git.kernel.org/stable/c/29ffd972531f8e6e0edf4ea3496190acff9fc9c2
- https://git.kernel.org/stable/c/bf3308416a2be85dcc9965b614a745b40beeff14
- https://git.kernel.org/stable/c/fc710f89a644e030a7ca15343176ca862fd61b9d
- https://git.kernel.org/stable/c/8d4d06d6e2b501cb8e30ed3b1924c470358e8052
- https://git.kernel.org/stable/c/0aaa53936419cf0c19c670387fc6d431e042a1b6
- https://git.kernel.org/stable/c/1f77af0aaf277413ff32f6ff8c2c4282bd64c897
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | Linux |
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary) |
European references
- ENISA EUVD · EUVD-2026-76315
- GCVE · GCVE-0-2026-80992
CERT-FR advisories
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1375 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1289 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1253 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected a0d2f20650e81407d8e51ad2cbdc492861c74e9c < 29ffd972531f8e6e0edf4ea3496190acff9fc9c2 ; affected a0d2f20650e81407d8e51ad2cbdc492861c74e9c < bf3308416a2be85dcc9965b614a745b40beeff14 ; affected a0d2f20650e81407d8e51ad2cbdc492861c74e9c < fc710f89a644e030a7ca15343176ca862fd61b9d ; affected a0d2f20650e81407d8e51ad2cbdc492861c74e9c < 8d4d06d6e2b501cb8e30ed3b1924c470358e8052 ; affected a0d2f20650e81407d8e51ad2cbdc492861c74e9c < 0aaa53936419cf0c19c670387fc6d431e042a1b6 ; affected a0d2f20650e81407d8e51ad2cbdc492861c74e9c < 1f77af0aaf277413ff32f6ff8c2c4282bd64c897 |
| Linux · Linux | affected 4.2 ; unaffected 0 < 4.2 ; unaffected 6.1.188 ≤ 6.1.* ; unaffected 6.6.157 ≤ 6.6.* ; unaffected 6.12.109 ≤ 6.12.* ; unaffected 6.18.50 ≤ 6.18.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |