CVE-2025-38054
MEDIUM EPSS 4.9%
Published Jun 18, 20251y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Published Jun 18, 2025 1y ago
Last Modified Jun 17, 2026 1w ago
Description
In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Limit signal/freq counts in summary output functions The debugfs summary output could access uninitialized elements in the freq_in[] and signal_out[] arrays, causing NULL pointer dereferences and triggering a kernel Oops (page_fault_oops). This patch adds u8 fields (nr_freq_in, nr_signal_out) to track the number of initialized elements, with a maximum of 4 per array. The summary output functions are updated to respect these limits, preventing out-of-bounds access and ensuring safe array handling. Widen the label variables because the change confuses GCC about max length of the strings.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High
Threat Intelligence
EPSS Exploit Probability
4.9% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-908
Affected Products 9
References 3
- git.kernel.org https://git.kernel.org/stable/c/0b7d3e782027ac3b6fec56159e8e348042000aef
- git.kernel.org https://git.kernel.org/stable/c/c9e455581e2ba87ee38c126e8dc49a424b9df0cf
- git.kernel.org https://git.kernel.org/stable/c/fcad74f894ac89790084cc2e1ec61b08220941d1
Remediation
- git.kernel.org https://git.kernel.org/stable/c/0b7d3e782027ac3b6fec56159e8e348042000aef
- git.kernel.org https://git.kernel.org/stable/c/c9e455581e2ba87ee38c126e8dc49a424b9df0cf
- git.kernel.org https://git.kernel.org/stable/c/fcad74f894ac89790084cc2e1ec61b08220941d1