Linux Kernel PPS Subsystem Warning Fix Vulnerability

Vulnerability

A vulnerability in the Linux kernel's PPS (Pulse Per Second) subsystem can lead to a warning being triggered when registering a device. This issue occurs because the release hook is not set before the device is registered. If the device registration fails, the system attempts to call the release function, which can result in a warning about a double free error. The vulnerability affects several versions of the Linux kernel, including 6.17.0-rc3.

Impact

The vulnerability can cause a warning to be issued about a double free error, which can lead to memory management issues.

Reproduction

The vulnerability can be reproduced by registering a PPS device without setting the release hook first. When the device registration fails, the system will attempt to call the release function, triggering a warning about a double free error. This can be done by creating a PPS source and registering it without properly handling the device release process.

Remediation

The vulnerability has been addressed in the Linux kernel by modifying the PPS device registration process to include the release hook before the device is registered. Users can upgrade to the latest version of the Linux kernel to apply this fix.

Added: Oct 28, 2025, 12:33 PM
Updated: Oct 28, 2025, 12:33 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.0
exploitability
4.3
remediation
7.7
relevance
0.8
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.