CVE-2025-37910

Description

In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix NULL dereference in Adva board SMA sysfs operations On Adva boards, SMA sysfs store/get operations can call __handle_signal_outputs() or __handle_signal_inputs() while the `irig` and `dcf` pointers are uninitialized, leading to a NULL pointer dereference in __handle_signal() and causing a kernel crash. Adva boards don't use `irig` or `dcf` functionality, so add Adva-specific callbacks `ptp_ocp_sma_adva_set_outputs()` and `ptp_ocp_sma_adva_set_inputs()` that avoid invoking `irig` or `dcf` input/output routines.

Reserved 2025-04-16 | Published 2025-05-20 | Updated 2025-05-26 | Assigner Linux

Product status

Default status
unaffected

ef61f5528fca6c3bbb2f8bc002fd1949c9d1f9b9 before 8a543d825e78b8d680d8f891381b83fbffdb0bb6
affected

ef61f5528fca6c3bbb2f8bc002fd1949c9d1f9b9 before 5b349f9cdb4a9daa133bea267dfc0c383628387a
affected

ef61f5528fca6c3bbb2f8bc002fd1949c9d1f9b9 before e98386d79a23c57cf179fe4138322e277aa3aa74
affected

Default status
affected

6.9
affected

Any version before 6.9
unaffected

6.12.28
unaffected

6.14.6
unaffected

6.15
unaffected

References

git.kernel.org/...c/8a543d825e78b8d680d8f891381b83fbffdb0bb6

git.kernel.org/...c/5b349f9cdb4a9daa133bea267dfc0c383628387a

git.kernel.org/...c/e98386d79a23c57cf179fe4138322e277aa3aa74

cve.org (CVE-2025-37910)

nvd.nist.gov (CVE-2025-37910)

Download JSON