CVE-2026-63837

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> net: ena: PHC: Check return code before setting timestamp output<br /> <br /> ena_phc_gettimex64() is setting the output parameter regardless<br /> of whether ena_com_phc_get_timestamp() succeeded or failed.<br /> <br /> When ena_com_phc_get_timestamp() returns an error, the timestamp<br /> parameter may contain uninitialized stack memory (e.g., when PHC is<br /> disabled or in blocked state) or invalid hardware values. Passing<br /> these to userspace via the PTP ioctl is both a security issue<br /> (information leak) and a correctness bug.<br /> <br /> Fix by checking the return code after releasing the lock and only<br /> setting the output timestamp on success.