CVE-2025-68752: iavf: Implement settime64 with -EOPNOTSUPP
In the Linux kernel, the following vulnerability has been resolved:
iavf: Implement settime64 with -EOPNOTSUPP
ptpclocksettime() assumes every ptpclock has implemented settime64(). Stub it with -EOPNOTSUPP to prevent a NULL dereference.
The fix is similar to commit 329d050bbe63 ("gve: Implement settime64 with -EOPNOTSUPP").
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Implement iavf settime64() as a stub that returns -EOPNOTSUPP to prevent a NULL dereference.
iavf settime64() = -EOPNOTSUPP
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68752?
CVE-2025-68752 is classified as a low severity vulnerability that may cause a NULL dereference.
How do I fix CVE-2025-68752?
To fix CVE-2025-68752, ensure that the patched version of the Linux kernel is applied which includes the implementation of settime64 with -EOPNOTSUPP.
What software is affected by CVE-2025-68752?
CVE-2025-68752 affects the Linux kernel specifically in relation to the iavf driver.
What is the impact of CVE-2025-68752?
The impact of CVE-2025-68752 is primarily a potential NULL pointer dereference which could lead to application crashes.
Is CVE-2025-68752 being actively exploited?
As of now, there are no reports indicating that CVE-2025-68752 is being actively exploited in the wild.