Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-40994

ptp: fix integer overflow in max_vclocks_store

Description

In the Linux kernel, the following vulnerability has been resolved: ptp: fix integer overflow in max_vclocks_store On 32bit systems, the "4 * max" multiply can overflow. Use kcalloc() to do the allocation to prevent this.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 44c494c8e30e35713c7d11ca3c5ab332cbfabacf to < 4b03da87d0b7074c93d9662c6e1a8939f9b8b86eaffected
  • 44c494c8e30e35713c7d11ca3c5ab332cbfabacf to < d50d62d5e6ee6aa03c00bddb91745d0b632d3b0faffected
  • 44c494c8e30e35713c7d11ca3c5ab332cbfabacf to < 666e934d749e50a37f3796caaf843a605f115b6faffected
  • 44c494c8e30e35713c7d11ca3c5ab332cbfabacf to < e1fccfb4638ee6188377867f6015d0ce35764a8eaffected
  • 44c494c8e30e35713c7d11ca3c5ab332cbfabacf to < 81d23d2a24012e448f651e007fac2cfd20a45ce0affected

Linux Linux

Default version status: affected

  • 5.14affected
  • 0 to < 5.14unaffected
  • 5.15.162 to ≤ 5.15.*unaffected
  • 6.1.96 to ≤ 6.1.*unaffected
  • 6.6.36 to ≤ 6.6.*unaffected
  • 6.9.7 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References