CVE-2025-21924CWE-459

CVE-2025-21924

High · published April 1, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
10.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error

During the initialization of ptp, hclge_ptp_get_cycle might return an error

and returned directly without unregister clock and free it. To avoid that,

call hclge_ptp_destroy_clock to unregist and free clock if

hclge_ptp_get_cycle failed.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00212 · 10.9th percentile
Weakness
CWE-459 · Incomplete Cleanup
Published
2025-04-01T20:15Z
Affected products (15)
ProductVersionsFixed in
linux/linux_kernel≥ 5.14.1, < 5.15.1795.15.179
linux/linux_kernel≥ 5.16, < 6.1.1316.1.131
linux/linux_kernel≥ 6.2, < 6.6.836.6.83
linux/linux_kernel≥ 6.7, < 6.12.196.12.19
linux/linux_kernel≥ 6.13, < 6.13.76.13.7
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (7)
EPSS history
Timeline
  • 01 APR 15:40Z
    net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
    cvelistv5