In the Linux kernel, the following vulnerability has been resolved:
net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower()
The ethtool tsconfig Netlink path can trigger a null pointer dereference. A call chain such as:
tsconfig_prepare_data() -> dev_get_hwtstamp_phylib() -> vlan_hwtstamp_get() -> generic_hwtstamp_get_lower() -> generic_hwtstamp_ioctl_lower()
results in generic_hwtstamp_ioctl_lower() being called with kernel_cfg->ifr as NULL.
The generic_hwtstamp_ioctl_lower() function does not expect a NULL ifr and dereferences it, leading to a system crash.
Fix this by adding a NULL check for kernel_cfg->ifr in generic_hwtstamp_ioctl_lower(). If ifr is NULL, return -EINVAL.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 4, 2025 |
| Ubuntu | — | Upgrade linux-image-6.17.0-1009-aws-64kUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-virtualUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-6.17.0-1009-oracle-64kUpgrade linux-image-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.17.0-1009-gcp-64kUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.17.0-19-genericUpgrade linux-image-6.17.0-1017-oemUpgrade linux-image-6.17.0-1009-gcpUpgrade linux-image-generic-6.17Upgrade linux-image-6.17.0-1010-raspiUpgrade linux-image-oem-24.04bUpgrade linux-image-oracle-6.17Upgrade linux-image-azure-6.17Upgrade linux-image-aws-6.17Upgrade linux-image-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-6.17Upgrade linux-image-oem-24.04Upgrade linux-image-6.17.0-1008-realtimeUpgrade linux-image-gcpUpgrade linux-image-gcp-6.17Upgrade linux-image-6.17.0-19-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-virtual-6.17Upgrade linux-image-realtimeUpgrade linux-image-oem-24.04dUpgrade linux-image-raspi-6.17Upgrade linux-image-6.17.0-1009-awsUpgrade linux-image-gcp-64kUpgrade linux-image-aws-64k-6.17Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-6.17.0-1009-oracleUpgrade linux-image-azureUpgrade linux-image-6.17.0-1010-azureUpgrade linux-image-oem-6.17Upgrade linux-image-awsUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-realtime-6.17Upgrade linux-image-oem-24.04cUpgrade linux-image-oem-24.04a | Mar 17, 2026 | Dec 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub