CVE-2025-40298

Linux Kernel - Denial of Service via PTP Clock settime64 NULL Dereference

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: gve: Implement settime64 with -EOPNOTSUPP ptp_clock_settime() assumes every ptp_clock has implemented settime64(). Stub it with -EOPNOTSUPP to prevent a NULL dereference.

References (2)

Core 2

Core References

Patch

https://git.kernel.org/stable/c/c9efb03ff4fae0bc7e5ef3323c3aab599cb4c88a

Patch

https://git.kernel.org/stable/c/329d050bbe63c2999f657cf2d3855be11a473745

Scores

EPSS 0.0003

EPSS Percentile 8.0%

Details

Status published

Products (7)

linux/Kernel 6.17.0 - 6.17.8linux

Linux/Linux < 6.17

Linux/Linux 6.17

Linux/Linux 6.17.8 - 6.17.*

Linux/Linux 6.18

Linux/Linux acd16380523b400400523fe54c7499320e558e80 - 329d050bbe63c2999f657cf2d3855be11a473745

Linux/Linux acd16380523b400400523fe54c7499320e558e80 - c9efb03ff4fae0bc7e5ef3323c3aab599cb4c88a

Published Dec 08, 2025

Tracked Since Feb 18, 2026