Linux Kernel Vulnerability in PTP Clock Implementation by Vendor

CVE-2025-40299

What is CVE-2025-40299?

A vulnerability exists in the Linux kernel related to the implementation of ptp_clock, specifically affecting the functions gettimex64 and gettime64. This flaw could lead to potential NULL dereferencing when these functions are assumed to be implemented by every ptp_clock. The recent resolution introduced a stub for gettimex64 that returns -EOPNOTSUPP, helping to mitigate this issue and prevent application crashes. The fix emphasizes the need for robust validation in low-level system functionalities.

References