CVE-2024-40994

ptp: fix integer overflow in max_vclocks_store

published July 12, 2024

CVSS
—
EPSS
0%
Percentile
19.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ptp: fix integer overflow in max_vclocks_store

On 32bit systems, the "4 * max" multiply can overflow. Use kcalloc()

to do the allocation to prevent this.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00277 · 19.1th percentile
Published
2024-07-12T12:37Z
EPSS history
Timeline
  • 12 JUL 12:37Z
    ptp: fix integer overflow in max_vclocks_store
    cvelistv5