Critical NULL Pointer Dereference in Linux Kernel on Adva Boards
Summary
DEBIAN-CVE-2025-37910: In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix NULL dereference in Adva board SMA sysfs operations On Adva boards, SMA sysfs store/get operations can call handle_signal_outputs() or han... Affects linux versions < 6.12.29-1. Fixed in 6.12.29-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to applications. It is widely used in various environments, from servers to embedded systems. This vulnerability specifically affects Adva boards, which utilize the Precision Time Protocol (PTP) for synchronization. The kernel's handling of sysfs operations for SMA (Synchronous Multi-Access) can lead to system instability if not addressed.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the PTP subsystem related to Adva boards. The issue arises from uninitialized pointers, specifically irig and dcf, during sysfs store/get operations. When these pointers are accessed, it results in a NULL pointer dereference, causing a kernel crash. This vulnerability can lead to system downtime and instability, particularly affecting applications relying on precise timing.
How To Fix
Minimum fixed version
6.12.29-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it becomes available to avoid potential system crashes.
Conclusion
The identified vulnerability in the Linux kernel poses a significant risk to systems using Adva boards. It is essential to apply the available patch to ensure system stability and prevent potential crashes. Regular monitoring and updates are vital for maintaining security in open-source software.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a NULL pointer dereference in the Linux kernel's PTP subsystem, specifically affecting Adva boards.
It can lead to kernel crashes, causing system instability and downtime, particularly for applications that depend on precise timing.
Yes, the patch is included in the Linux package version 6.12.29-1 and later.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check your application without any signup.
While there are no specific workarounds, it is crucial to plan for an update to mitigate the risk of crashes.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
