Linux Kernel Vulnerability in PTP Clock Functionality

CVE-2025-40298

What is CVE-2025-40298?

A flaw in the Linux kernel's PTP clock functionality has been identified where the ptp_clock_settime() function inadequately assumes that all PTP clocks have implemented the settime64() method. This oversight can lead to a NULL dereference, potentially causing system instability or crashes. The kernel has addressed this by stubbing the function with the error code -EOPNOTSUPP to enhance stability and security. System administrators and developers are encouraged to update to the latest kernel version to mitigate this vulnerability.

References