In the Linux kernel, the following vulnerability has been resolved:
ptp: ocp: Limit signal/freq counts in summary output functions
The debugfs summary output could access uninitialized elements in the freq_in[] and signal_out[] arrays, causing NULL pointer dereferences and triggering a kernel Oops (page_fault_oops). This patch adds u8 fields (nr_freq_in, nr_signal_out) to track the number of initialized elements, with a maximum of 4 per array. The summary output functions are updated to respect these limits, preventing out-of-bounds access and ensuring safe array handling.
Widen the label variables because the change confuses GCC about max length of the strings.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade kernel-source-vanillaUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade kernel-azureUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade kernel-default-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-64kb-extraUpgrade kernel-macrosUpgrade kernel-azure-extraUpgrade kernel-obs-qaUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade kernel-default | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-24.04aUpgrade linux-image-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-64kUpgrade linux-image-oracleUpgrade linux-image-oem-24.04bUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-aws-64k-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-realtimeUpgrade linux-image-virtualUpgrade linux-image-oem-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-generic-64k-6.14Upgrade linux-image-gcpUpgrade linux-image-oem-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-generic-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-generic-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gcp-6.14Upgrade linux-image-awsUpgrade linux-image-azureUpgrade linux-image-oracle-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-raspiUpgrade linux-image-aws-6.14 | Jun 26, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub