CVE-2025-39855:

A NULL pointer dereference vulnerability in the Linux kernel's ice driver for E810 network devices could lead to system crashes or potential privilege escalation.

Score
A numerical rating that indicates how dangerous this vulnerability is.

7.8High

Published Date:Sep 19, 2025
CISA KEV Date:*No Data*
Industries Affected:20

Threat Predictions

EPSS Score:0.0
EPSS Percentile:6%

Exploitability

Score:1.8
Attack Vector:LOCAL
Attack Complexity:LOW
Privileges Required:LOW
User Interaction:NONE
Scope:UNCHANGED

Impact

Score:5.9
Confidentiality Impact:HIGH
Integrity Impact:HIGH
Availability Impact:HIGH

Description Preview

A NULL pointer dereference vulnerability in the Linux kernel's ice driver for E810 network devices could lead to system crashes or potential privilege escalation.

Overview

The vulnerability affects the Linux kernel's ice driver, specifically the handling of Tx timestamps for Intel E810 network devices. The E810 device uses a "low latency" firmware interface for accessing Tx timestamps, which bypasses the standard timestamp logic. However, the ice_ptp_ts_irq() function does not properly check if the Tx timestamp tracker is initialized before accessing it. This oversight can result in NULL pointer dereferences or use-after-free bugs, leading to kernel panics or system crashes. The vulnerability is particularly problematic when a Tx timestamp interrupt occurs simultaneously with driver reset operations, creating a race condition that exposes the flaw.

Remediation

To address this vulnerability, the Linux kernel maintainers have implemented a fix that adds proper initialization checks before accessing the Tx timestamp tracker. The patch ensures that the in_use bitmap and other fields are only accessed if the tracker is marked as initialized. Additionally, the driver reset flow now clears the init field under lock before tearing down the tracker, preventing potential use-after-free or NULL access issues. Users and system administrators should update their Linux kernel to a version that includes this fix to mitigate the vulnerability. It is also recommended to monitor for any additional security advisories related to this issue and apply any further patches or updates as they become available.