Riskcovery

CVE-2025-21769

ptp: vmclock: Add .owner to vmclock_miscdev_fops

State
Published
Severity
5.5 Medium
Published
Feb 27, 2025
Updated
May 11, 2026
Reserved
Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ptp: vmclock: Add .owner to vmclock_miscdev_fops

Without the .owner field, the module can be unloaded while /dev/vmclock0 is open, leading to an oops.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 20503272422693d793b84f88bf23fe4e955d3a33 to before 3b5709225b43ee33e1026dd1fc0949a7f19b5289Affected
  • 20503272422693d793b84f88bf23fe4e955d3a33 to before 7b07b040257c1b658ef3eca86e4b6ae02d65069cAffected
LinuxLinux
  • 6.13Affected
  • before 6.13Not affected
  • 6.13.4 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.