EXPLOIT/ALERT Back to feed

Linux vulnerability

In the Linux kernel, the following vulnerability has been resolved: net: ravb: avoid dereferencing an invalid PTP clock The PTP clock is unavailable before the first open, so querying its index can dereference a NULL pointer. Registration failures can also leave an error pointer in priv->ptp.clock. Cache the PHC index separately and report -1 while no clock is registered. Normalize registration errors to NULL and preserve the static timestamping capabilities.

Published 11 Sep 2026Updated 13 Sep 20264 sources
CVSS 7.8
Overview Sources History

What happened

In the Linux kernel, the following vulnerability has been resolved: net: ravb: avoid dereferencing an invalid PTP clock The PTP clock is unavailable before the first open, so querying its index can dereference a NULL pointer. Registration failures can also leave an error pointer in priv->ptp.clock. Cache the PHC index separately and report -1 while no clock is registered. Normalize registration errors to NULL and preserve the static timestamping capabilities.

Affected versions

Linux: a0d2f20650e81407d8e51ad2cbdc492861c74e9c through before fc710f89a644e030a7ca15343176ca862fd61b9d (git); a0d2f20650e81407d8e51ad2cbdc492861c74e9c through before 8d4d06d6e2b501cb8e30ed3b1924c470358e8052 (git); a0d2f20650e81407d8e51ad2cbdc492861c74e9c through before 0aaa53936419cf0c19c670387fc6d431e042a1b6 (git); a0d2f20650e81407d8e51ad2cbdc492861c74e9c through before 1f77af0aaf277413ff32f6ff8c2c4282bd64c897 (git); 4.2 Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

  • Apply vendor-provided updates or mitigations.
  • Review affected product exposure and access logs.

Public PoC references

No public PoC reference has passed the current publication threshold.

CorrectionsReport an issue