CVE-2026-80564
Received Received - Intake

NULL dereference in Linux kernel gve driver

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: gve: fix NULL dereference due to missing ptp adjfine Fix NULL dereference due to missing implementation of adjfine, which can be triggered from usermode as follows: sudo ./testptp -d /dev/ptp0 -f 0 [ 551.943697] BUG: kernel NULL pointer dereference, address: 0000000000000000 [...] [ 552.061946] Call Trace: [ 552.064487] <TASK> [ 552.066681] ptp_clock_adjtime+0x1c0/0x2c0 [ 552.070874] ? get_clock_desc+0x6b/0xb0 [ 552.074825] pc_clock_adjtime+0x78/0xc0 [ 552.078755] __do_sys_clock_adjtime+0x85/0x110 [ 552.083293] do_syscall_64+0xea/0x610

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-26
Last Modified
2026-08-26
Generated
2026-08-26
AI Q&A
2026-08-26
EPSS Evaluated
N/A
NVD
CVE-2026-80564
EUVD
EUVD-2026-66479

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a NULL pointer dereference in the Linux kernel caused by a missing implementation of the adjfine function in the gve driver. It can be triggered from user mode by running a specific command, leading to a kernel crash.

Detection Guidance

This vulnerability can be detected by checking for NULL pointer dereference errors in kernel logs after attempting to use the ptp adjfine function. Run: sudo dmesg | grep -i 'NULL pointer dereference' or check system logs for crashes during PTP operations.

Impact Analysis

This vulnerability can cause a kernel crash (NULL pointer dereference) when the affected command is executed, potentially leading to denial of service or system instability.

Mitigation Strategies

Apply the latest Linux kernel update that includes the fix for this issue. If immediate patching is not possible, disable PTP functionality or restrict access to /dev/ptp0 device to prevent triggering the vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80564. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart