logo_clicknbuy.png

CVE-2025-21822 – Linux Kernel PTP Vulnerability – Use After Free

The following table lists the changes that have been made to the
CVE-2025-21822 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Feb. 27, 2025

    Action Type Old Value New Value
    Added Description In the Linux kernel, the following vulnerability has been resolved:

    ptp: vmclock: Set driver data before its usage

    If vmclock_ptp_register() fails during probing, vmclock_remove() is
    called to clean up the ptp clock and misc device.
    It uses dev_get_drvdata() to access the vmclock state.
    However the driver data is not yet set at this point.

    Assign the driver data earlier.
    Added Reference https://git.kernel.org/stable/c/6dbd8b91a065d1d8001446a28e72cd140f9acef0
    Added Reference https://git.kernel.org/stable/c/f7d07cd4f77d77f366c8ffbb8ba8b61f614e5fce
Share the Post:

Related Posts