Vulnerability in Linux

CVE-2025-40057

In the Linux kernel, the following vulnerability has been resolved: ptp: Add a upper bound on max_vclocks syzbot reported WARNING in max_vclocks_store. This occurs when the argument max is too large for kcalloc to handle. Extend the guard to guard against values that are too large for kcalloc

EPSS: 0.002 (10.0th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 73f37068d540eba5f93ba3a0019bf479d35ebd76, 5.14, 0

References