Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-40057

ptp: Add a upper bound on max_vclocks

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ptp: Add a upper bound on max_vclocks syzbot reported WARNING in max_vclocks_store. This occurs when the argument max is too large for kcalloc to handle. Extend the guard to guard against values that are too large for kcalloc

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 73f37068d540eba5f93ba3a0019bf479d35ebd76 to < da513f2ad1b1b1cf1880ccc2603ce1f1f818eb2eaffected
  • 73f37068d540eba5f93ba3a0019bf479d35ebd76 to < 8dd446056336faa2283d62cefc2f576536845edcaffected
  • 73f37068d540eba5f93ba3a0019bf479d35ebd76 to < 35ce5f163889dbce88eda1df661b357a09bbed87affected
  • 73f37068d540eba5f93ba3a0019bf479d35ebd76 to < e9f35294e18da82162004a2f35976e7031aaf7f9affected

Linux Linux

Default version status: affected

  • 5.14affected
  • 0 to < 5.14unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.53 to ≤ 6.12.*unaffected
  • 6.17.3 to ≤ 6.17.*unaffected
  • 6.18 to ≤ *unaffected

References