Vulnerability in Linux

CVE-2025-40299

In the Linux kernel, the following vulnerability has been resolved: gve: Implement gettimex64 with -EOPNOTSUPP gve implemented a ptp_clock for sole use of do_aux_work at this time. ptp_clock_gettime() and ptp_sys_offset() assume every ptp_clock has implemented either gettimex64 or gettime64. Stub gettimex64 and return -EOPNOTSUPP to prevent NULL dereferencing.

EPSS: 0.002 (6.2th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions acd16380523b400400523fe54c7499320e558e80, 6.17, 0

References