Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-37910

ptp: ocp: Fix NULL dereference in Adva board SMA sysfs operations

Description

In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix NULL dereference in Adva board SMA sysfs operations On Adva boards, SMA sysfs store/get operations can call __handle_signal_outputs() or __handle_signal_inputs() while the `irig` and `dcf` pointers are uninitialized, leading to a NULL pointer dereference in __handle_signal() and causing a kernel crash. Adva boards don't use `irig` or `dcf` functionality, so add Adva-specific callbacks `ptp_ocp_sma_adva_set_outputs()` and `ptp_ocp_sma_adva_set_inputs()` that avoid invoking `irig` or `dcf` input/output routines.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • ef61f5528fca6c3bbb2f8bc002fd1949c9d1f9b9 to < 8a543d825e78b8d680d8f891381b83fbffdb0bb6affected
  • ef61f5528fca6c3bbb2f8bc002fd1949c9d1f9b9 to < 5b349f9cdb4a9daa133bea267dfc0c383628387aaffected
  • ef61f5528fca6c3bbb2f8bc002fd1949c9d1f9b9 to < e98386d79a23c57cf179fe4138322e277aa3aa74affected

Linux Linux

Default version status: affected

  • 6.9affected
  • 0 to < 6.9unaffected
  • 6.12.28 to ≤ 6.12.*unaffected
  • 6.14.6 to ≤ 6.14.*unaffected
  • 6.15 to ≤ *unaffected

References