CVE-2026-63837
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
19/07/2026
Última modificación:
27/07/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
net: ena: PHC: Check return code before setting timestamp output<br />
<br />
ena_phc_gettimex64() is setting the output parameter regardless<br />
of whether ena_com_phc_get_timestamp() succeeded or failed.<br />
<br />
When ena_com_phc_get_timestamp() returns an error, the timestamp<br />
parameter may contain uninitialized stack memory (e.g., when PHC is<br />
disabled or in blocked state) or invalid hardware values. Passing<br />
these to userspace via the PTP ioctl is both a security issue<br />
(information leak) and a correctness bug.<br />
<br />
Fix by checking the return code after releasing the lock and only<br />
setting the output timestamp on success.



