CVE-2025-40057

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: ptp: Add a upper bound on max_vclocks syzbot reported WARNING in max_vclocks_store. This occurs when the argument max is too large for kcalloc to handle. Extend the guard to guard against values that are too large for kcalloc

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedOct 28, 2025
First seenOct 28, 2025

How to fix

Update
  • Linux Linux5ba2f8fd3db1c695f74f7f5df72eb87d52668a66, da513f2ad1b1b1cf1880ccc2603ce1f1f818eb2e, 8dd446056336faa2283d62cefc2f576536845edc, 35ce5f163889dbce88eda1df661b357a09bbed87, e9f35294e18da82162004a2f35976e7031aaf7f9 or later

Affected products

ProductAffected versionsFixed in
Linux Linux73f37068d540eba5f93ba3a0019bf479d35ebd76 ≤ v < 5ba2f8fd3db1c695f74f7f5df72eb87d52668a66, 73f37068d540eba5f93ba3a0019bf479d35ebd76 ≤ v < da513f2ad1b1b1cf1880ccc2603ce1f1f818eb2e, 73f37068d540eba5f93ba3a0019bf479d35ebd76 ≤ v < 8dd446056336faa2283d62cefc2f576536845edc, 73f37068d540eba5f93ba3a0019bf479d35ebd76 ≤ v < 35ce5f163889dbce88eda1df661b357a09bbed87, 73f37068d540eba5f93ba3a0019bf479d35ebd76 ≤ v < e9f35294e18da82162004a2f35976e7031aaf7f9, 5.145ba2f8fd3db1c695f74f7f5df72eb87d52668a66, da513f2ad1b1b1cf1880ccc2603ce1f1f818eb2e, 8dd446056336faa2283d62cefc2f576536845edc, 35ce5f163889dbce88eda1df661b357a09bbed87, e9f35294e18da82162004a2f35976e7031aaf7f9

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.