CVE-2025-40057

CVE-2025-40057

published October 28, 2025

CVSS
—
EPSS
0%
Percentile
11.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ptp: Add a upper bound on max_vclocks

syzbot reported WARNING in max_vclocks_store.

This occurs when the argument max is too large for kcalloc to handle.

Extend the guard to guard against values that are too large for

kcalloc

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00216 · 11.4th percentile
Published
2025-10-28T16:15Z
References (4)
https://git.kernel.org/stable/c/35ce5f163889dbce88eda1df661b357a09bbed87 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8dd446056336faa2283d62cefc2f576536845edc · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/da513f2ad1b1b1cf1880ccc2603ce1f1f818eb2e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e9f35294e18da82162004a2f35976e7031aaf7f9 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 28 OCT 11:48Z
    ptp: Add a upper bound on max_vclocks
    cvelistv5