UBUNTU-CVE-2026-80564: Null Pointer Dereference
In the Linux kernel, the following vulnerability has been resolved: gve: fix NULL dereference due to missing ptp adjfine Fix NULL dereference due to missing implementation of adjfine, which can be triggered from usermode as follows: sudo ./testptp -d /dev/ptp0 -f 0 [ 551.943697] BUG: kernel NULL pointer dereference, address: 0000000000000000 [...] [ 552.061946] Call Trace: [ 552.064487] <TASK> [ 552.066681] ptpclockadjtime+0x1c0/0x2c0 [ 552.070874] ? getclockdesc+0x6b/0xb0 [ 552.074825] pcclockadjtime+0x78/0xc0 [ 552.078755] dosysclockadjtime+0x85/0x110 [ 552.083293] dosyscall64+0xea/0x610
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-hwe-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-42.42~24.04.1 - Upgrade
Upgrade
ubuntu/linux-riscv-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-42.42.1~24.04.1 - Upgrade
Upgrade
ubuntu/linuxto a version that resolves this vulnerability.Fixed in 7.0.0-42.42 - Upgrade
Upgrade
ubuntu/linux-awsto a version that resolves this vulnerability.Fixed in 7.0.0-1016.17 - Upgrade
Upgrade
ubuntu/linux-gcpto a version that resolves this vulnerability.Fixed in 7.0.0-1016.18 - Upgrade
Upgrade
ubuntu/linux-ibmto a version that resolves this vulnerability.Fixed in 7.0.0-1017.17 - Upgrade
Upgrade
ubuntu/linux-oem-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-1017.17 - Upgrade
Upgrade
ubuntu/linux-oracleto a version that resolves this vulnerability.Fixed in 7.0.0-1015.16 - Upgrade
Upgrade
ubuntu/linux-riscvto a version that resolves this vulnerability.Fixed in 7.0.0-42.42.1
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems running one of the listed Ubuntu Linux kernel packages are potentially exposed when the Google Virtual Ethernet (gve) driver provides a PTP clock device such as /dev/ptp0.
What is required to trigger the crash?
A user-mode process must invoke PTP clock frequency adjustment through the affected device. The reported trigger uses testptp against /dev/ptp0 with the -f 0 option, and the example is run with sudo.
What happens if the vulnerability is exploited?
The missing adjfine implementation causes a NULL pointer dereference in the kernel's PTP clock adjustment path. The supplied trace shows the failure occurring in ptp_clock_adjtime during a clock_adjtime system call.