Resolved vulnerability in Linux kernel's posix-clock

CVE-2024-50195

What is CVE-2024-50195?

A vulnerability in the Linux kernel affects the precision time protocol (PTP) clock handling. It involves an improper validation of the 'timespec64' structure, which can lead to unsafe assumptions in driver implementations. Specific drivers may rely on time values without proper range checks, creating potential instability. This flaw requires validating both the 'tv_sec' and 'tv_nsec' values to ensure they reside within acceptable limits, preventing erroneous time settings in dynamic clocks.

References