PT-2025-22172 · Linux+4 · Linux Kernel+4

Published

2025-05-01

·

Updated

2026-02-03

·

CVE-2025-37910

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A NULL pointer dereference issue has been identified in the Linux kernel, specifically in the ptp: ocp module, related to Adva board SMA sysfs operations. The issue occurs when irig and dcf pointers are uninitialized, leading to a kernel crash. This problem is specific to Adva boards, which do not utilize irig or dcf functionality. To address this, Adva-specific callbacks ptp ocp sma adva set outputs() and ptp ocp sma adva set inputs() have been introduced to bypass the invocation of irig or dcf input/output routines.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Access of Uninitialized Pointer

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2025-12328
CVE-2025-37910
USN-7649-1
USN-7649-2
USN-7650-1
USN-7665-1
USN-7665-2
USN-7721-1

Affected Products

Astra Linux
Linuxmint
Linux Kernel
Red Os
Ubuntu