PT-2025-38562

CVE-2025-39855

·

Published

2025-04-16

·

Updated

2025-09-20

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw in the ice ptp ts irq() function where it does not check if the timestamp tracker is initialized before its first access. This can lead to a NULL pointer dereference or use-after-free bug, potentially triggered by a race condition between a Tx timestamp interrupt and the driver reset logic. The issue is related to the "low latency" firmware interface for accessing and reading Tx timestamps on E810 devices.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾