In the Linux kernel, the following vulnerability has been resolved:

net: ravb: avoid dereferencing an invalid PTP clock

The PTP clock is unavailable before the first open, so querying its
index can dereference a NULL pointer. Registration failures can also
leave an error pointer in priv->ptp.clock.

Cache the PHC index separately and report -1 while no clock is
registered. Normalize registration errors to NULL and preserve the
static timestamping capabilities.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.002.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
a0d2f20650e81407d8e51ad2cbdc492861c74e9c affected < fc710f89a644e030a7ca15343176ca862fd61b9d
a0d2f20650e81407d8e51ad2cbdc492861c74e9c affected < 8d4d06d6e2b501cb8e30ed3b1924c470358e8052
a0d2f20650e81407d8e51ad2cbdc492861c74e9c affected < 0aaa53936419cf0c19c670387fc6d431e042a1b6
a0d2f20650e81407d8e51ad2cbdc492861c74e9c affected < 1f77af0aaf277413ff32f6ff8c2c4282bd64c897
Linux Linux affected
Version Status Constraints
4.2 affected —
0 unaffected < 4.2
6.12.109 unaffected ≤ 6.12.*
6.18.50 unaffected ≤ 6.18.*
7.2.4 unaffected ≤ 7.2.*
7.3-rc1 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0aaa53936419cf0c19c670387fc6d431e042a1b6 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/1f77af0aaf277413ff32f6ff8c2c4282bd64c897 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/8d4d06d6e2b501cb8e30ed3b1924c470358e8052 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/fc710f89a644e030a7ca15343176ca862fd61b9d cve-icon cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-80992 cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-80992 cve-icon
History

Sat, 12 Sep 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-476
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.9, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Fri, 11 Sep 2026 23:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: net: ravb: avoid dereferencing an invalid PTP clock The PTP clock is unavailable before the first open, so querying its index can dereference a NULL pointer. Registration failures can also leave an error pointer in priv->ptp.clock. Cache the PHC index separately and report -1 while no clock is registered. Normalize registration errors to NULL and preserve the static timestamping capabilities.
Title net: ravb: avoid dereferencing an invalid PTP clock
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-09-11T19:42:48.855Z

Reserved: 2026-08-26T14:34:25.811Z

Link: CVE-2026-80992

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-11T20:19:06.110

Modified: 2026-09-11T20:19:06.110

Link: CVE-2026-80992

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-09-11T19:42:48Z

Links: CVE-2026-80992 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-09-12T02:00:07Z

Weaknesses