CVE-2026-63837

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An information leak exists in the ena phc gettimex64() function. The function sets the output parameter without verifying if ena com phc get timestamp() succeeded. If ena com phc get timestamp() returns an error, such as when the PTP Hardware Clock (PHC) is disabled or blocked, the timestamp parameter may contain invalid hardware values or uninitialized stack memory. This data is then passed to userspace via the PTP ioctl, leading to a potential leak of sensitive memory information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.