In the Linux kernel, the following vulnerability has been resolved:
net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower()
The ethtool tsconfig Netlink path can trigger a null pointer dereference. A call chain such as:
tsconfig_prepare_data() -> dev_get_hwtstamp_phylib() -> vlan_hwtstamp_get() -> generic_hwtstamp_get_lower() -> generic_hwtstamp_ioctl_lower()
results in generic_hwtstamp_ioctl_lower() being called with kernel_cfg->ifr as NULL.
The generic_hwtstamp_ioctl_lower() function does not expect a NULL ifr and dereferences it, leading to a system crash.
Fix this by adding a NULL check for kernel_cfg->ifr in generic_hwtstamp_ioctl_lower(). If ifr is NULL, return -EINVAL.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 4, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-6.17Upgrade linux-image-oracle-6.17Upgrade linux-image-virtualUpgrade linux-image-6.17.0-1009-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.17.0-1009-gcpUpgrade linux-image-oracleUpgrade linux-image-6.17.0-19-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-6.17.0-1009-aws-64kUpgrade linux-image-6.17.0-1017-oemUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-genericUpgrade linux-image-6.17.0-1009-gcp-64kUpgrade linux-image-6.17.0-1010-raspiUpgrade linux-image-aws-6.17Upgrade linux-image-generic-6.17Upgrade linux-image-oracle-64k-6.17Upgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-oem-6.17Upgrade linux-image-6.17.0-1009-awsUpgrade linux-image-raspi-6.17Upgrade linux-image-aws-64kUpgrade linux-image-aws-64k-6.17Upgrade linux-image-gcp-64kUpgrade linux-image-6.17.0-1009-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-6.17.0-1008-realtimeUpgrade linux-image-oem-24.04cUpgrade linux-image-virtual-6.17Upgrade linux-image-raspiUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-realtime-6.17Upgrade linux-image-generic-64k-6.17Upgrade linux-image-oem-24.04aUpgrade linux-image-6.17.0-19-generic-64kUpgrade linux-image-realtimeUpgrade linux-image-oem-24.04dUpgrade linux-image-6.17.0-1010-azureUpgrade linux-image-gcp-6.17Upgrade linux-image-generic-64kUpgrade linux-image-aws | Mar 17, 2026 | Dec 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub