CVE-2026-80992

HighCVSS 7.8/10Last modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: ravb: avoid dereferencing an invalid PTP clock

The PTP clock is unavailable before the first open, so querying its index can dereference a NULL pointer. Registration failures can also leave an error pointer in priv->ptp.clock.

Cache the PHC index separately and report -1 while no clock is registered. Normalize registration errors to NULL and preserve the static timestamping capabilities.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= a0d2f20650e81407d8e51ad2cbdc492861c74e9c, < 29ffd972531f8e6e0edf4ea3496190acff9fc9c2; >= a0d2f20650e81407d8e51ad2cbdc492861c74e9c, < bf3308416a2be85dcc9965b614a745b40beeff14; >= a0d2f20650e81407d8e51ad2cbdc492861c74e9c, < fc710f89a644e030a7ca15343176ca862fd61b9d; >= a0d2f20650e81407d8e51ad2cbdc492861c74e9c, < 8d4d06d6e2b501cb8e30ed3b1924c470358e8052; >= a0d2f20650e81407d8e51ad2cbdc492861c74e9c, < 0aaa53936419cf0c19c670387fc6d431e042a1b6; >= a0d2f20650e81407d8e51ad2cbdc492861c74e9c, < 1f77af0aaf277413ff32f6ff8c2c4282bd64c897
LinuxLinux4.2

References

Timeline

Published
Sep 11, 2026
Last modified
Oct 19, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-80993In the Linux kernel, the following vulnerability has been resolved: net: phylink: correctly validate returned PCS in phylink_inband_caps ICVE-2026-809947.8In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix flow mask use-after-free on flow deletion The coCVE-2026-809957.8In the Linux kernel, the following vulnerability has been resolved: net: mctp: hold a reference to the route device in mctp_route_lookup() CVE-2026-80996In the Linux kernel, the following vulnerability has been resolved: net: l2tp: do not propagate multicast notification errors The tunnel cCVE-2026-809977.5In the Linux kernel, the following vulnerability has been resolved: net: ipa: fix stalled modem TX queue after runtime resume ipa_start_xmCVE-2026-809987.5In the Linux kernel, the following vulnerability has been resolved: net: bnxt: ring the doorbell when SW USO exits early When a burst of pCVE-2026-80999In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO rtl83xxCVE-2026-81008.6Impact A security issue has been identified in Chef 360 that could allow unauthorized access to protected API endpoints under specific condCVE-2026-810007.8In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom tun_get_user() uses tun->align both aCVE-2026-810017.8In the Linux kernel, the following vulnerability has been resolved: slip: fix use-after-free in sl_sync() slip_devs[] stores bare net_deviCVE-2026-810029.8In the Linux kernel, the following vulnerability has been resolved: xdp: fix zero-copy frame layout xdp_convert_zc_to_xdp_frame() clones aCVE-2026-810038.1In the Linux kernel, the following vulnerability has been resolved: net/iucv: filter frames in afiucv_hs_rcv() by ingress device afiucv_hs
CVE-2026-80992: High severity, CVSS 7.8 | Vulnix