CVE-2025-68752

CVE-2025-68752 addresses a NULL dereference vulnerability in the Linux kernel's iavf driver. This occurs because the ptp_clock_settime() function incorrectly assumes all ptp_clock implementations include settime64(), which the iavf driver previously lacked. The fix involves stubbing settime64() with -EOPNOTSUPP to prevent this issue. The vulnerability has a FAUCET Risk Score of 7/100, indicating low severity. While a NULL dereference could lead to system instability or denial of service, the attack vector and complexity are not detailed, suggesting it's likely difficult to exploit. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, indicating a low current threat level.