In the Linux kernel, the following vulnerability has been resolved:
ptp: vmclock: Set driver data before its usage
If vmclockptpregister() fails during probing, vmclockremove() is called to clean up the ptp clock and misc device. It uses devget_drvdata() to access the vmclock state. However the driver data is not yet set at this point.
Assign the driver data earlier.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21822.json"
}