Linux Kernel Vulnerability Affecting PTP Driver Functionality

CVE-2025-21822

Summary

In the Linux kernel, a vulnerability exists within the PTP driver related to the handling of driver data during the vmclock_ptp_register() process. If the registration fails, the subsequent cleanup procedure, vmclock_remove(), attempts to access the driver state without proper initialization, as dev_get_drvdata() is called before the driver data is set. This flaw can lead to undefined behavior. To address the issue, the assignment of driver data should occur earlier in the code flow to ensure stability and reliability in clock management. For further technical details, refer to the kernel's official documentation and source code.

References