Security readout for executives and security teams
Plain-English summary
A Linux HNS3 network-driver error path can leave a Precision Time Protocol clock registered and allocated when initialization fails. This incorrect cleanup may affect system security or stability. Exposure appears limited to systems using the relevant HNS3 hardware and PTP functionality; the supplied sources do not establish remote exploitation.
Executive priority
Treat this as a high-priority, targeted Linux kernel update rather than an internet-wide emergency. First identify HNS3-equipped hosts using PTP, then apply distribution-supported kernels containing the fix. There is no supplied evidence of active exploitation, but the 7.8 score and kernel-level impact justify prompt remediation on exposed systems.
Technical view
During HNS3 PTP initialization, hclge_ptp_get_cycle can fail after clock registration. The vulnerable path returns without calling hclge_ptp_destroy_clock, leaving the clock registered and allocated. Stable-kernel commits add the missing cleanup. CVSS 3.1 scores this 7.8 with local, low-privilege access and potentially high confidentiality, integrity, and availability impact.
Likely exposure
Prioritize Linux hosts using the HNS3 driver with PTP enabled or initialized. The bundle lists affected kernel versions including 5.14, 5.15.179, 6.1.131, 6.6.83, 6.12.19, 6.13.7, and 6.14, but its version representation is ambiguous; confirm exact status with the distribution vendor.
Exploitation context
CVE-2025-21924 is not identified as a KEV, and the supplied sources provide no evidence of active exploitation. The CVSS vector describes local exploitation requiring low privileges and no user interaction. The precise path from the cleanup flaw to the scored confidentiality, integrity, and availability impacts is not explained in the bundle.
Researcher notes
The disclosed defect is missing error-path cleanup after hclge_ptp_get_cycle fails: the registered PTP clock is not unregistered or freed. The fix invokes hclge_ptp_destroy_clock before returning. The bundle supplies multiple stable-branch commits but no proof of exploitation, trigger prevalence, CWE assignment, or detailed impact mechanism; those gaps limit exploitability assessment.
Mitigation direction
- Install a vendor kernel containing the applicable upstream stable fix.
- Follow distribution guidance for the running kernel branch and architecture.
- Prioritize HNS3-equipped systems where PTP functionality is enabled.
- If patching is delayed, consult the vendor about safely disabling unused HNS3 PTP functionality.
Validation and detection
- Inventory kernel versions and identify systems using the HNS3 network driver.
- Determine whether HNS3 Precision Time Protocol functionality is enabled or initialized.
- Verify the installed vendor kernel includes the applicable stable-kernel fix.
- Review kernel logs for HNS3 PTP initialization failures or related resource errors.
- Retest HNS3 PTP initialization after updating the kernel.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2025-21924 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- High
- CVSS
- 7.8 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H1.85.9LinuxVulnerability scoring details
Base CVSS 3.1 score
7.8HighVector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/b7d8d4529984e2d4a72a6d552fb886233e8e83cbCVE reference, Linux
- https://git.kernel.org/stable/c/33244e98aa9503585e585335fe2ceb4492630949CVE reference, Linux
- https://git.kernel.org/stable/c/2c04e507f3a5c5dc6e2b9ab37d8cdedee1ef1a37CVE reference, Linux
- https://git.kernel.org/stable/c/9cfc43c0e6e6a31122b4008d763a2960c206aa2dCVE reference, Linux
- https://git.kernel.org/stable/c/21dba813d9821687a7f9aff576798ba21a859a32CVE reference, Linux
- https://git.kernel.org/stable/c/b7365eab39831487a84e63a9638209b68dc54008CVE reference, Linux
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.htmlCVE reference, CVE
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.