CVE-2025-21814
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Feb 27, 2025
Updated: Mar 13, 2025
CWE ID 476
Summary
CVE-2025-21814 is a Linux kernel vulnerability affecting certain drivers in the ptp (Precision Time Protocol) subsystem. Specifically, the ioctl and sysfs handlers unconditionally invoke the info->enable callback, potentially resulting in NULL dereferences. Not all drivers implement this callback, and those that do not, include ptp_s390.c, ptp_vclock.c, and ptp_mock.c, are at risk. To mitigate this issue, a dummy callback should be used instead when no suitable callback is provided by the driver.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.