PT-2025-49085 · Linux+2 · Linux Kernel+2

Published

2025-12-04

·

Updated

2026-04-06

·

CVE-2025-40255

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the Linux kernel’s networking subsystem related to hardware timestamping. Specifically, a null pointer dereference can occur within the generic hwtstamp ioctl lower() function when handling the ethtool tsconfig Netlink path. This occurs because the function is called with a NULL ifr pointer, leading to a system crash. The call chain involves functions such as tsconfig prepare data(), dev get hwtstamp phylib(), vlan hwtstamp get(), generic hwtstamp get lower(), and ultimately generic hwtstamp ioctl lower().
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2025-40255
OPENSUSE-SU-2026:20145-1
SUSE-SU-2026:20207-1
SUSE-SU-2026:20220-1
SUSE-SU-2026:20228-1
USN-8094-1
USN-8094-2
USN-8094-3
USN-8094-4
USN-8094-5
USN-8152-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu