CVE-2025-40298

CVE-2025-40298

published December 8, 2025

CVSS
—
EPSS
0%
Percentile
7.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

gve: Implement settime64 with -EOPNOTSUPP

ptp_clock_settime() assumes every ptp_clock has implemented settime64().

Stub it with -EOPNOTSUPP to prevent a NULL dereference.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00185 · 7.6th percentile
Published
2025-12-08T06:16Z
References (2)
https://git.kernel.org/stable/c/329d050bbe63c2999f657cf2d3855be11a473745 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c9efb03ff4fae0bc7e5ef3323c3aab599cb4c88a · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 08 DEC 00:46Z
    gve: Implement settime64 with -EOPNOTSUPP
    cvelistv5