kernel security update

4.18.0-553.50.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Vulnerability of the ptp_clock_register() function in the drivers/ptp/ptp_clock.c module – The PTP clock driver for Linux kernels allows a hacker to trigger a service failure.

Vulnerability of the ptpclockregister function in the drivers/ptp/ptpclock.c module – The Linux kernel’s PTP clock driver is vulnerable to a vulnerability where memory is not properly freed before the last reference is removed memory leak. Exploiting this vulnerability could allow an attacker to...

UBUNTU-CVE-2025-21924

In the Linux kernel, the following vulnerability has been resolved: net: hns3: make sure ptp clock is unregister and freed if hclgeptpgetcycle returns an error During the initialization of ptp, hclgeptpgetcycle might return an error and returned directly without unregister clock and free it. To...

CVE-2025-21924

CVE-2025-21924 : In the Linux kernel, during ptp initialization for the hns3 driver, hclge_ptp_get_cycle may fail and previously not unregister/free the clock. The fix calls hclge_ptp_destroy_clock to unregister and free the clock when hclge_ptp_get_cycle fails, mitigating potential resource leaks.

CVE-2025-21924 net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error

In the Linux kernel, the following vulnerability has been resolved: net: hns3: make sure ptp clock is unregister and freed if hclgeptpgetcycle returns an error During the initialization of ptp, hclgeptpgetcycle might return an error and returned directly without unregister clock and free it. To...

CVE-2025-21924

In the Linux kernel, the following vulnerability has been resolved: net: hns3: make sure ptp clock is unregister and freed if hclgeptpgetcycle returns an error During the initialization of ptp, hclgeptpgetcycle might return an error and returned directly without unregister clock and free it. To...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not unregistering the PTP clock in the wrong path...

ROS-20250314-01

Vulnerability of x86/bugs components of Linux operating system kernel is related to resource management errors in the arch/x86/include/asm/nospec-branch.h file. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the mptcp component of the Lin...

Linux Distros Unpatched Vulnerability : CVE-2024-50195

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - posix-clock: Fix missing timespec64 check in pcclocksettime As Andrew pointed out, it will make sense that the PTP core checked timespec64 struct's tvsec and...

Linux Distros Unpatched Vulnerability : CVE-2023-52580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/core: Fix ETHP1588 flow dissector When a PTP ethernet raw frame with a size of more than...

SUSE CVE-2025-21822

In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: Set driver data before its usage If vmclockptpregister fails during probing, vmclockremove is called to clean up the ptp clock and misc device. It uses devgetdrvdata to access the vmclock state. However the driver...

PT-2025-14305

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified where the hclge ptp get cycle function may return an error during the initialization of ptp, potentially leading to the ptp clock not bein...

AZL-57752 CVE-2025-21814 affecting package kernel for versions less than 5.15.179.1-1

In the Linux kernel, the following vulnerability has been resolved: ptp: Ensure info-enable callback is always set The ioctl and sysfs handlers unconditionally call the -enable callback. Not all drivers implement that callback, leading to NULL dereferences. Example of affected drivers: ptps390.c,...

DEBIAN-CVE-2025-21814

In the Linux kernel, the following vulnerability has been resolved: ptp: Ensure info-enable callback is always set The ioctl and sysfs handlers unconditionally call the -enable callback. Not all drivers implement that callback, leading to NULL dereferences. Example of affected drivers: ptps390.c,...

UBUNTU-CVE-2025-21822

In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: Set driver data before its usage If vmclockptpregister fails during probing, vmclockremove is called to clean up the ptp clock and misc device. It uses devgetdrvdata to access the vmclock state. However the driver...

CVE-2025-21822

In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: Set driver data before its usage If vmclockptpregister fails during probing, vmclockremove is called to clean up the ptp clock and misc device. It uses devgetdrvdata to access the vmclock state. However the driver...

CVE-2025-21822 ptp: vmclock: Set driver data before its usage

In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: Set driver data before its usage If vmclockptpregister fails during probing, vmclockremove is called to clean up the ptp clock and misc device. It uses devgetdrvdata to access the vmclock state. However the driver...

CVE-2025-21814

CVE-2025-21814 affects the Linux kernel PTP code: ioctl/sysfs handlers call the info->enable callback unconditionally, which can be NULL if the driver doesn’t implement it. Affected drivers include ptp_s390.c, ptp_vclock.c and ptp_mock.c. The fix replaces a missing callback with a dummy one to...

CVE-2025-21814 ptp: Ensure info->enable callback is always set

In the Linux kernel, the following vulnerability has been resolved: ptp: Ensure info-enable callback is always set The ioctl and sysfs handlers unconditionally call the -enable callback. Not all drivers implement that callback, leading to NULL dereferences. Example of affected drivers: ptps390.c,...

SUSE CVE-2022-49088

In the Linux kernel, the following vulnerability has been resolved: dpaa2-ptp: Fix refcount leak in dpaa2ptpprobe This node pointer is returned by offindcompatiblenode with refcount incremented. Calling ofnodeput to aovid the refcount leak...