CVE-2025-40057

Full vulnerability record from the local CVENow database.

Description

In the Linux kernel, the following vulnerability has been resolved: ptp: Add a upper bound on max_vclocks syzbot reported WARNING in max_vclocks_store. This occurs when the argument max is too large for kcalloc to handle. Extend the guard to guard against values that are too large for kcalloc

Severity

Not scored

CVSS score

Not available

Vulnerability status

Deferred

Source identifier

416baaa9-dc9f-4396-8d5f-8c081fb06d67

Published

2025-10-28 12:15:40.033000

Last modified

2026-10-30 13:18:12.627000

View original CVE JSON

{
  "id": "CVE-2025-40057",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "published": "2025-10-28T12:15:40.033",
  "lastModified": "2026-10-30T13:18:12.627",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nptp: Add a upper bound on max_vclocks\n\nsyzbot reported WARNING in max_vclocks_store.\n\nThis occurs when the argument max is too large for kcalloc to handle.\n\nExtend the guard to guard against values that are too large for\nkcalloc"
    },
    {
      "lang": "es",
      "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nptp: Añadir un límite superior en max_vclocks\n\nsyzbot informó de una ADVERTENCIA en max_vclocks_store.\n\nEsto ocurre cuando el argumento max es demasiado grande para que kcalloc lo maneje.\n\nAmpliar la protección para proteger contra valores que son demasiado grandes para kcalloc"
    }
  ],
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "programFiles": [
            "drivers/ptp/ptp_private.h",
            "drivers/ptp/ptp_sysfs.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "73f37068d540eba5f93ba3a0019bf479d35ebd76",
              "lessThan": "5ba2f8fd3db1c695f74f7f5df72eb87d52668a66",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "73f37068d540eba5f93ba3a0019bf479d35ebd76",
              "lessThan": "da513f2ad1b1b1cf1880ccc2603ce1f1f818eb2e",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "73f37068d540eba5f93ba3a0019bf479d35ebd76",
              "lessThan": "8dd446056336faa2283d62cefc2f576536845edc",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "73f37068d540eba5f93ba3a0019bf479d35ebd76",
              "lessThan": "35ce5f163889dbce88eda1df661b357a09bbed87",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "73f37068d540eba5f93ba3a0019bf479d35ebd76",
              "lessThan": "e9f35294e18da82162004a2f35976e7031aaf7f9",
              "versionType": "git",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "programFiles": [
            "drivers/ptp/ptp_private.h",
            "drivers/ptp/ptp_sysfs.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "5.14",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "5.14",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.1.191",
              "lessThanOrEqual": "6.1.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.6.160",
              "lessThanOrEqual": "6.6.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.12.53",
              "lessThanOrEqual": "6.12.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.17.3",
              "lessThanOrEqual": "6.17.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.18",
              "lessThanOrEqual": "*",
              "versionType": "original_commit_for_fix",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/35ce5f163889dbce88eda1df661b357a09bbed87",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/5ba2f8fd3db1c695f74f7f5df72eb87d52668a66",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/8dd446056336faa2283d62cefc2f576536845edc",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/da513f2ad1b1b1cf1880ccc2603ce1f1f818eb2e",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/e9f35294e18da82162004a2f35976e7031aaf7f9",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ]
}