793 matches found
CVE-2026-31396
A flaw was found in the Linux kernel's Media Access Controller MACB Ethernet driver and Precision Time Protocol PTP clock subsystem. A local attacker could exploit a use-after-free vulnerability by accessing the PTP clock via the gettsinfo ethtool call after the PTP clock has been deallocated. Th...
CVE-2026-31396
In the Linux kernel, the following vulnerability has been resolved: net: macb: fix use-after-free access to PTP clock PTP clock is registered on every opening of the interface and destroyed on every closing. However it may be accessed via gettsinfo ethtool call which is possible while the interfa...
CVE-2026-31396 net: macb: fix use-after-free access to PTP clock
In the Linux kernel, the following vulnerability has been resolved: net: macb: fix use-after-free access to PTP clock PTP clock is registered on every opening of the interface and destroyed on every closing. However it may be accessed via gettsinfo ethtool call which is possible while the interfa...
CVE-2026-31396 net: macb: fix use-after-free access to PTP clock
In the Linux kernel, the following vulnerability has been resolved: net: macb: fix use-after-free access to PTP clock PTP clock is registered on every opening of the interface and destroyed on every closing. However it may be accessed via gettsinfo ethtool call which is possible while the interfa...
CVE-2026-31396
In the Linux kernel, the following vulnerability has been resolved: net: macb: fix use-after-free access to PTP clock PTP clock is registered on every opening of the interface and destroyed on every closing. However it may be accessed via gettsinfo ethtool call which is possible while the interfa...
CVE-2026-31396
Summary: CVE-2026-31396 affects the Linux kernel’s net/macb and PTP clock subsystem. The root cause is a use-after-free in ptp_clock_index() when the PTP clock is accessed via get_ts_info while the interface’s PTP clock object has been deregistered. This allows a local attacker to trigger a crash...
PT-2026-30179
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.164+ Description The Linux kernel contained a use-after-free issue in the networking subsystem related to the macb driver and the PTP Precision Time Protocol clock. Specifically, the PTP clock could be access...
The vulnerability of the ptp_clock_register() function in the drivers/ptp/ptp_clock.c module of the Linux operating system’s PTP clock support driver allows a hacker to cause a service failure.
The vulnerability of the ptpclockregister function in the drivers/ptp/ptpclock.c module of the Linux operating system’s time support driver lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a attacker to cause a service failure...
ROS-20260323-73-0004
A vulnerability in the ptprate function of the Linux kernel is related to the lack of division by zero check. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
ROS-20260304-73-0023
A vulnerability in the drivers/net/phy/mscc/msccptp.c module of the Linux operating system kernel is related to a lack of memory release after an effective lifetime. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005763)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005763 advisory. In the Linux kernel, the following vulnerability has been resolved: posix-clock: Fix missing timespec64 check in pcclocksettime As Andrew pointed out, it will make...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005717)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005717 advisory. In the Linux kernel, the following vulnerability has been resolved: posix-clock: Fix missing timespec64 check in pcclocksettime As Andrew pointed out, it will make...
USN-8029-3: Linux kernel (Azure) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - Nios II architecture; - PA-RISC architecture; - RISC-V architecture; -...
CVE-2025-71226
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2025-71226
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2025-71226
The CVE-2025-71226 affects the Linux kernel’s iwlwifi driver for MVM/MLD PTP clocks. The vulnerability stemmed from not implementing settime64 in the PTP clock, causing -EINVAL warnings on ptp_clock_register. The fix adds a stub for settime64 that returns -EOPNOTSUPP to suppress the warning and a...
CVE-2025-71226 wifi: iwlwifi: Implement settime64 as stub for MVM/MLD PTP
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: Implement settime64 as stub for MVM/MLD PTP Since commit dfb073d32cac "ptp: Return -EINVAL on ptpclockregister if required ops are NULL", PTP clock registered through ptpclockregister is required to have...
Linux Distros Unpatched Vulnerability : CVE-2025-71226
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: iwlwifi: Implement settime64 as stub for MVM/MLD PTP Since commit dfb073d32cac ptp: Return -EINVAL on ptpclockregister if required ops are NULL, PTP clock...
USN-8048-1: Linux kernel (OEM) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - Nios II architecture; - PA-RISC architecture; - RISC-V architecture; -...
CVE-2026-23210
In the Linux kernel, the following vulnerability has been resolved: ice: Fix PTP NULL pointer dereference during VSI rebuild Fix race condition where PTP periodic work runs while VSI is being rebuilt, accessing NULL vsi-rxrings. The sequence was: 1. iceptpprepareforreset cancels PTP work 2...