BaseFortify

Publication date: 2026-01-05

Last updated on: 2026-01-08

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: iavf: Implement settime64 with -EOPNOTSUPP ptp_clock_settime() assumes every ptp_clock has implemented settime64(). Stub it with -EOPNOTSUPP to prevent a NULL dereference. The fix is similar to commit 329d050bbe63 ("gve: Implement settime64 with -EOPNOTSUPP").

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-05

Last Modified

2026-01-08

Generated

2026-07-06

AI Q&A

2026-01-05

EPSS Evaluated

2026-07-04

NVD

CVE-2025-68752

EUVD

EUVD-2026-0894

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability involves the Linux kernel's iavf driver where the function ptp_clock_settime() assumes that every ptp_clock has implemented the settime64() function. However, if settime64() is not implemented, this can lead to a NULL pointer dereference. The fix was to stub settime64() with an error code (-EOPNOTSUPP) to prevent this NULL dereference.

Impact Analysis

The vulnerability can cause a NULL pointer dereference in the Linux kernel, which may lead to system instability or crashes when ptp_clock_settime() is called on a ptp_clock without settime64() implemented.

Hi! I’m here to help you understand CVE-2025-68752. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70