VDB

CVE-2026-80992

CVE-2026-80992 PUBLISHED CVSS 7.8 HIGH

Reported by Linux · Published September 11, 2026

In the Linux kernel, the following vulnerability has been resolved: net: ravb: avoid dereferencing an invalid PTP clock The PTP clock is unavailable before the first open, so querying its index can dereference a NULL pointer. Registration failures can also leave an error pointer in priv->ptp.clock. Cache the PHC index separately and report -1 while no clock is registered. Normalize registration errors to NULL and preserve the static timestamping capabilities.

EPSS 0.16% · 6.0th percentile

Risk Scores

CVSS 3.1
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.16%
6.0th percentile

Affected Products

VendorProductVersions
LinuxLinuxa0d2f20650e81407d8e51ad2cbdc492861c74e9c, a0d2f20650e81407d8e51ad2cbdc492861c74e9c, a0d2f20650e81407d8e51ad2cbdc492861c74e9c
LinuxLinux4.2, 0, 6.1.188
linuxlinux_kernel4.2, 4.2, 4.2
LinuxLinuxa0d2f20650e81407d8e51ad2cbdc492861c74e9c, a0d2f20650e81407d8e51ad2cbdc492861c74e9c, a0d2f20650e81407d8e51ad2cbdc492861c74e9c

Timeline

  • Sep 11, 2026 CVE Published
  • Sep 12, 2026 EPSS Score
  • Sep 12, 2026 Coalition ESS Score
  • Sep 13, 2026 EPSS Score
  • Sep 14, 2026 CVE Updated
  • Sep 15, 2026 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›