CVE-2025-21814

Updated: 2025-05-05 17:14:58.229667

Description:

In the Linux kernel, the following vulnerability has been resolved: ptp: Ensure info->enable callback is always set The ioctl and sysfs handlers unconditionally call the ->enable callback. Not all drivers implement that callback, leading to NULL dereferences. Example of affected drivers: ptp_s390.c, ptp_vclock.c and ptp_mock.c. Instead use a dummy callback if no better was specified by the driver.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0
CVSS Version 3.x MEDIUM 5.5

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 5.5 MEDIUM Ignored 2025-03-11 00:54:49
AlmaLinux 9.6 ESU kernel 5.14.0 5.5 MEDIUM Ignored 2025-07-05 02:18:08
CentOS 7 ELS kernel 3.10.0 5.5 MEDIUM Ignored 2025-03-10 22:54:30
CentOS 8.4 ELS kernel 4.18.0 5.5 MEDIUM Ignored 2025-03-11 00:54:47
CentOS 8.5 ELS kernel 4.18.0 5.5 MEDIUM Ignored 2025-03-11 00:54:48
CentOS Stream 8 ELS kernel 4.18.0 5.5 MEDIUM Ignored 2025-03-10 22:54:29
CloudLinux 7 ELS kernel 3.10.0 5.5 MEDIUM Ignored 2025-03-10 22:54:28
Oracle Linux 7 ELS kernel 3.10.0 5.5 MEDIUM Ignored 2025-03-10 22:54:28
Oracle Linux 7 ELS kernel-uek 5.4.17 5.5 MEDIUM Released CLSA-2025:1746479711 2025-05-08 04:11:25
RHEL 7 ELS kernel 3.10.0 5.5 MEDIUM Ignored 2025-05-24 02:22:54
Total: 14