Riskcovery

CVE-2026-80564

gve: fix NULL dereference due to missing ptp adjfine

State
Published
Severity
Not scored
Published
Aug 26, 2026
Updated
Aug 26, 2026
Reserved
Aug 26, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

gve: fix NULL dereference due to missing ptp adjfine

Fix NULL dereference due to missing implementation of adjfine, which can be triggered from usermode as follows:

sudo ./testptp -d /dev/ptp0 -f 0 [ 551.943697] BUG: kernel NULL pointer dereference, address: 0000000000000000 [...] [ 552.061946] Call Trace: [ 552.064487] <TASK> [ 552.066681] ptp_clock_adjtime+0x1c0/0x2c0 [ 552.070874] ? get_clock_desc+0x6b/0xb0 [ 552.074825] pc_clock_adjtime+0x78/0xc0 [ 552.078755] __do_sys_clock_adjtime+0x85/0x110 [ 552.083293] do_syscall_64+0xea/0x610

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • acd16380523b400400523fe54c7499320e558e80 to before e9482feeed66d4bc805458631013e9b61b1a9eafAffected
  • acd16380523b400400523fe54c7499320e558e80 to before fa9b991bf678dd412dc0ed080672d34d7558d7afAffected
  • acd16380523b400400523fe54c7499320e558e80 to before 3992ced109c70b771efad9e51ae68e5c7a04dea3Affected
LinuxLinux
  • 6.17Affected
  • before 6.17Not affected
  • 6.18.46 through 6.18.*Not affected
  • 7.1.10 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.