CVE-2025-21924

Katalog CVE

CVSS 5.5 · Medium EPSS 0,21%

Kerentanan Incomplete Cleanup pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error During the initialization of ptp, hclge_ptp_get_cycle might return an error and returned directly without unregister clock and free it. To avoid that, call hclge_ptp_destroy_clock to unregist and free clock if hclge_ptp_get_cycle failed.

Rincian

Terbit di NVD

1 April 2025

Terakhir diubah

30 Juli 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-459: Incomplete Cleanup

EPSS (30 hari)

0,21% peluang dieksploitasi; lebih tinggi dari 10,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/21dba813d9821687a7f9aff576798ba21a859a32 patch
• https://git.kernel.org/stable/c/2c04e507f3a5c5dc6e2b9ab37d8cdedee1ef1a37 patch
• https://git.kernel.org/stable/c/33244e98aa9503585e585335fe2ceb4492630949 patch
• https://git.kernel.org/stable/c/9cfc43c0e6e6a31122b4008d763a2960c206aa2d patch
• https://git.kernel.org/stable/c/b7365eab39831487a84e63a9638209b68dc54008 patch
• https://git.kernel.org/stable/c/b7d8d4529984e2d4a72a6d552fb886233e8e83cb patch
• https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html