High 7.8Published Apr 1, 2025

CVE-2025-21924net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error

Updated under an hour ago (Oct 27, 2026, 6:00 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error During the initialization of ptp, hclge_ptp_get_cycle might return an error and returned directly without unregister clock and free it. To avoid that, call hclge_ptp_destroy_clock to unregist and free clock if hclge_ptp_get_cycle failed.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 15, 2026
First seen by InfoSec Signals: Oct 15, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 8373cd38a8888549ace7c7617163a2e826970a92 before b7d8d4529984e2d4a72a6d552fb886233e8e83cb; from 8373cd38a8888549ace7c7617163a2e826970a92 before 33244e98aa9503585e585335fe2ceb4492630949; 8373cd38a8888549ace7c7617163a2e826970a92 builds before 2c04e507f3a5c5dc6e2b9ab37d8cdedee1ef1a37; 8373cd38a8888549ace7c7617163a2e826970a92 builds before 9cfc43c0e6e6a31122b4008d763a2960c206aa2d; 8373cd38a8888549ace7c7617163a2e826970a92 builds before 21dba813d9821687a7f9aff576798ba21a859a32; from 8373cd38a8888549ace7c7617163a2e826970a92 before b7365eab39831487a84e63a9638209b68dc54008	CNA record
linux linux_kernel linux:linux_kernel	from 5.14.1 before 5.15.179; from 5.16 before 6.1.131; from 6.2 before 6.6.83; from 6.7 before 6.12.19; from 6.13 before 6.13.7; 5.14; 5.14; 5.14; and 7 more ranges	NVD

References

References

https://git.kernel.org/stable/c/b7d8d4529984e2d4a72a6d552fb886233e8e83cb	patch
https://git.kernel.org/stable/c/33244e98aa9503585e585335fe2ceb4492630949	patch
https://git.kernel.org/stable/c/2c04e507f3a5c5dc6e2b9ab37d8cdedee1ef1a37	patch
https://git.kernel.org/stable/c/9cfc43c0e6e6a31122b4008d763a2960c206aa2d	patch
https://git.kernel.org/stable/c/21dba813d9821687a7f9aff576798ba21a859a32	patch
https://git.kernel.org/stable/c/b7365eab39831487a84e63a9638209b68dc54008	patch
https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.