Riskcovery

CVE-2025-37910

ptp: ocp: Fix NULL dereference in Adva board SMA sysfs operations

State
Published
Severity
Not scored
Published
May 20, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ptp: ocp: Fix NULL dereference in Adva board SMA sysfs operations

On Adva boards, SMA sysfs store/get operations can call __handle_signal_outputs() or __handle_signal_inputs() while the `irig` and `dcf` pointers are uninitialized, leading to a NULL pointer dereference in __handle_signal() and causing a kernel crash. Adva boards don't use `irig` or `dcf` functionality, so add Adva-specific callbacks `ptp_ocp_sma_adva_set_outputs()` and `ptp_ocp_sma_adva_set_inputs()` that avoid invoking `irig` or `dcf` input/output routines.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ef61f5528fca6c3bbb2f8bc002fd1949c9d1f9b9 to before 8a543d825e78b8d680d8f891381b83fbffdb0bb6Affected
  • ef61f5528fca6c3bbb2f8bc002fd1949c9d1f9b9 to before 5b349f9cdb4a9daa133bea267dfc0c383628387aAffected
  • ef61f5528fca6c3bbb2f8bc002fd1949c9d1f9b9 to before e98386d79a23c57cf179fe4138322e277aa3aa74Affected
LinuxLinux
  • 6.9Affected
  • before 6.9Not affected
  • 6.12.28 through 6.12.*Not affected
  • 6.14.6 through 6.14.*Not affected
  • 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.