CVE-2025-68215
BaseFortify
Publication date: 2025-12-16
Last updated on: 2025-12-18
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| intel | ice | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves improper cleanup of Precision Time Protocol (PTP) resources in the Linux kernel's ice driver during error paths such as driver probe failure or PTP restart errors. Specifically, calls to the ice_ptp_cleanup_pf function and the deinitialization of the 'ps_lock' mutex were missed, and the PTP clock was not unregistered in some cases. This leads to resource leaks and a warning trace when the ice_adapter object is freed, indicating that the port list was not empty as required.
How can this vulnerability impact me? :
The impact of this vulnerability is primarily related to resource management within the Linux kernel's ice driver. Missing cleanup calls can cause resource leaks and kernel warnings, potentially leading to instability or unexpected behavior when the driver is removed or restarted. This could affect system reliability but does not directly indicate a security breach or data compromise.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by monitoring the system logs for specific kernel warning messages related to the ice driver. Look for call traces containing 'ice_adapter_put' warnings and messages indicating issues unloading the ice module. You can use commands like 'dmesg | grep ice' or 'journalctl -k | grep ice' to find such traces in the kernel logs.
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation involves updating the Linux kernel to a version where the ice driver PTP cleanup issue is fixed. This ensures proper cleanup of PTP resources and prevents the warning and potential resource leaks. Until then, avoid removing or restarting the ice driver in error scenarios that trigger this issue.