# CVE-2026-80992

## Summary

- **CVE ID:** CVE-2026-80992
- **Severity:** HIGH
- **CVSS Score:** 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- **CWE:** N/A
- **Published:** Sep 11, 2026
- **Last Modified:** Sep 14, 2026

## Description

In the Linux kernel, the following vulnerability has been resolved:

net: ravb: avoid dereferencing an invalid PTP clock

The PTP clock is unavailable before the first open, so querying its
index can dereference a NULL pointer. Registration failures can also
leave an error pointer in priv->ptp.clock.

Cache the PHC index separately and report -1 while no clock is
registered. Normalize registration errors to NULL and preserve the
static timestamping capabilities.

## Affected Products

- Linux — Linux (a0d2f20650e81407d8e51ad2cbdc492861c74e9c)
- Linux — Linux (4.2)
- Linux — Linux (0)
- Linux — Linux (6.12.109)
- Linux — Linux (6.18.50)
- Linux — Linux (7.2.4)
- Linux — Linux (7.3-rc1)
- Linux — Linux (6.1.188)
- Linux — Linux (6.6.157)

## References

- [CNA](https://git.kernel.org/stable/c/fc710f89a644e030a7ca15343176ca862fd61b9d)
- [CNA](https://git.kernel.org/stable/c/8d4d06d6e2b501cb8e30ed3b1924c470358e8052)
- [CNA](https://git.kernel.org/stable/c/0aaa53936419cf0c19c670387fc6d431e042a1b6)
- [CNA](https://git.kernel.org/stable/c/1f77af0aaf277413ff32f6ff8c2c4282bd64c897)
- [CNA](https://git.kernel.org/stable/c/29ffd972531f8e6e0edf4ea3496190acff9fc9c2)
- [CNA](https://git.kernel.org/stable/c/bf3308416a2be85dcc9965b614a745b40beeff14)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.16%
- **EPSS Percentile:** 6.0

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-17._