CVE-2025-37910
MEDIUM EPSS 5.3%
Published May 20, 20251y ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Published May 20, 2025 1y ago
Last Modified Jun 17, 2026 2w ago
Description
In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix NULL dereference in Adva board SMA sysfs operations On Adva boards, SMA sysfs store/get operations can call __handle_signal_outputs() or __handle_signal_inputs() while the `irig` and `dcf` pointers are uninitialized, leading to a NULL pointer dereference in __handle_signal() and causing a kernel crash. Adva boards don't use `irig` or `dcf` functionality, so add Adva-specific callbacks `ptp_ocp_sma_adva_set_outputs()` and `ptp_ocp_sma_adva_set_inputs()` that avoid invoking `irig` or `dcf` input/output routines.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High
Threat Intelligence
EPSS Exploit Probability
5.3% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-476 NULL Pointer Dereference Memory Safety
Affected Products 6
References 3
- git.kernel.org https://git.kernel.org/stable/c/5b349f9cdb4a9daa133bea267dfc0c383628387a
- git.kernel.org https://git.kernel.org/stable/c/8a543d825e78b8d680d8f891381b83fbffdb0bb6
- git.kernel.org https://git.kernel.org/stable/c/e98386d79a23c57cf179fe4138322e277aa3aa74
Remediation
- git.kernel.org https://git.kernel.org/stable/c/5b349f9cdb4a9daa133bea267dfc0c383628387a
- git.kernel.org https://git.kernel.org/stable/c/8a543d825e78b8d680d8f891381b83fbffdb0bb6
- git.kernel.org https://git.kernel.org/stable/c/e98386d79a23c57cf179fe4138322e277aa3aa74