CVE-2025-40057

Not scored yetLast modified Oct 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ptp: Add a upper bound on max_vclocks

syzbot reported WARNING in max_vclocks_store.

This occurs when the argument max is too large for kcalloc to handle.

Extend the guard to guard against values that are too large for kcalloc

Metrics

No CVSS score has been published yet.

Affected software

VendorProductVersions
LinuxLinux>= 73f37068d540eba5f93ba3a0019bf479d35ebd76, < 5ba2f8fd3db1c695f74f7f5df72eb87d52668a66; >= 73f37068d540eba5f93ba3a0019bf479d35ebd76, < da513f2ad1b1b1cf1880ccc2603ce1f1f818eb2e; >= 73f37068d540eba5f93ba3a0019bf479d35ebd76, < 8dd446056336faa2283d62cefc2f576536845edc; >= 73f37068d540eba5f93ba3a0019bf479d35ebd76, < 35ce5f163889dbce88eda1df661b357a09bbed87; >= 73f37068d540eba5f93ba3a0019bf479d35ebd76, < e9f35294e18da82162004a2f35976e7031aaf7f9
LinuxLinux5.14

References

Timeline

Published
Oct 28, 2025
Last modified
Oct 30, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-400588.8In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Disallow dirty tracking if incoherent page walk Dirty pageCVE-2025-40059In the Linux kernel, the following vulnerability has been resolved: coresight: Fix incorrect handling for return value of devm_kzalloc TheCVE-2025-40064.7A vulnerability classified as critical has been found in youyiio BeyongCms 1.6.0. Affected is an unknown function of the file /admin/theme/UCVE-2025-40060In the Linux kernel, the following vulnerability has been resolved: coresight: trbe: Return NULL pointer for allocation failures When the CVE-2025-400617.8In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix race in do_task() when draining When do_task() exhausts CVE-2025-40062In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/qm - set NULL to qm->debug.qm_diff_regs When the iniCVE-2025-400637.0In the Linux kernel, the following vulnerability has been resolved: crypto: comp - Use same definition of context alloc and free ops In coCVE-2025-400647.8In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in __pnet_find_base_ndev(). syzbot reported usCVE-2025-40065In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Write hgatp register with valid mode bits According to thCVE-2025-40066In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Check phy before init msta_link in mt7996_mac_sta_aCVE-2025-400677.8In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist CVE-2025-400688.4In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: Fix integer overflow in run_unpack() The MFT record relativ