CVE-2025-40255

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s networking subsystem related to hardware timestamping. Specifically, a null pointer dereference can occur within the generic hwtstamp ioctl lower() function when handling the ethtool tsconfig Netlink path. This occurs because the function is called with a NULL ifr pointer, leading to a system crash. The call chain involves functions such as tsconfig prepare data(), dev get hwtstamp phylib(), vlan hwtstamp get(), generic hwtstamp get lower(), and ultimately generic hwtstamp ioctl lower().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.