CVE-2025-21814

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2025-02-27 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: ptp: Ensure info->enable callback is always set The ioctl and sysfs handlers unconditionally call the ->enable callback. Not all drivers implement that callback, leading to NULL dereferences. Example of affected drivers: ptp_s390.c, ptp_vclock.c and ptp_mock.c. Instead use a dummy callback if no better was specified by the driver.

Weakness Classification (1)

Affected Software (10)

VendorProductVersion
Linux Linux d94ba80ebbea17f036cecb104398fbcd788aa742 < fdc1e72487781dd7705bcbe30878bee7d5d1f3e8
Linux Linux d94ba80ebbea17f036cecb104398fbcd788aa742 < 9df3a9284f39bfd51a9f72a6a165c79e2aa5066b
Linux Linux d94ba80ebbea17f036cecb104398fbcd788aa742 < 1334c64a5d1de6666e0c9f984db6745083df1eb4
Linux Linux d94ba80ebbea17f036cecb104398fbcd788aa742 < 5d1041c76de656f9f8d5a192218039a9acf9bd00
Linux Linux d94ba80ebbea17f036cecb104398fbcd788aa742 < 81846070cba17125a866e8023c01d3465b153339
Linux Linux d94ba80ebbea17f036cecb104398fbcd788aa742 < 8441aea46445252df5d2eed6deb6d5246fc24002
Linux Linux d94ba80ebbea17f036cecb104398fbcd788aa742 < 755caf4ee1c615ee5717862e427124370f46b1f3
Linux Linux d94ba80ebbea17f036cecb104398fbcd788aa742 < fd53aa40e65f518453115b6f56183b0c201db26b
Linux Linux 3.0
linux linux_kernel 3.0 – 6.1.129

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.26%
Raw Score 0.002630
Percentile 18.2%
Date 2026-11-06

EPSS Trend

2026-11-06
0.00263
2026-11-05
0.00263

Intelligence Sources

mitre ref →
nvd ref →