Bug 2524488 (CVE-2026-80564) - CVE-2026-80564 kernel: gve: fix NULL dereference due to missing ptp adjfine
Summary: CVE-2026-80564 kernel: gve: fix NULL dereference due to missing ptp adjfine
Keywords:
Status: NEW
Alias: CVE-2026-80564
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-08-26 15:00 UTC by OSIDB Bzimport
Modified: 2026-08-27 12:23 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-08-26 15:00:05 UTC 
In the Linux kernel, the following vulnerability has been resolved:

gve: fix NULL dereference due to missing ptp adjfine

Fix NULL dereference due to missing implementation of adjfine, which can
be triggered from usermode as follows:

sudo ./testptp -d /dev/ptp0 -f 0
[  551.943697] BUG: kernel NULL pointer dereference, address: 0000000000000000
[...]
[  552.061946] Call Trace:
[  552.064487]  <TASK>
[  552.066681]  ptp_clock_adjtime+0x1c0/0x2c0
[  552.070874]  ? get_clock_desc+0x6b/0xb0
[  552.074825]  pc_clock_adjtime+0x78/0xc0
[  552.078755]  __do_sys_clock_adjtime+0x85/0x110
[  552.083293]  do_syscall_64+0xea/0x610
Comment 1 gkamathe 2026-08-27 12:13:59 UTC 
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2026082611-CVE-2026-80564-9a1f@gregkh/T
Note You need to log in before you can comment on or make changes to this bug.