CVE-2025-40057

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2025-10-28 Modified: 2026-10-30 First seen: 2026-10-30 Status: pending_score

Description

In the Linux kernel, the following vulnerability has been resolved: ptp: Add a upper bound on max_vclocks syzbot reported WARNING in max_vclocks_store. This occurs when the argument max is too large for kcalloc to handle. Extend the guard to guard against values that are too large for kcalloc

Affected Software (6)

VendorProductVersion
Linux Linux 73f37068d540eba5f93ba3a0019bf479d35ebd76 < 5ba2f8fd3db1c695f74f7f5df72eb87d52668a66
Linux Linux 73f37068d540eba5f93ba3a0019bf479d35ebd76 < da513f2ad1b1b1cf1880ccc2603ce1f1f818eb2e
Linux Linux 73f37068d540eba5f93ba3a0019bf479d35ebd76 < 8dd446056336faa2283d62cefc2f576536845edc
Linux Linux 73f37068d540eba5f93ba3a0019bf479d35ebd76 < 35ce5f163889dbce88eda1df661b357a09bbed87
Linux Linux 73f37068d540eba5f93ba3a0019bf479d35ebd76 < e9f35294e18da82162004a2f35976e7031aaf7f9
Linux Linux 5.14

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.25%
Raw Score 0.002470
Percentile 16.0%
Date 2026-11-01

EPSS Trend

2026-11-01
0.00247
2026-10-31
0.00247
2026-10-30
0.00247
2026-10-29
0.00249

Intelligence Sources

mitre ref →
nvd ref →