Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: gve: Implement gettimex64 with -EOPNOTSUPP gve implemented a ptp_clock for sole use of do_aux_work at this time. ptp_clock_gettime() and ptp_sys_offset() assume every ptp_clock has implemented either gettimex64 or gettime64. Stub gettimex64 and return -EOPNOTSUPP to prevent NULL dereferencing.
References
- https://git.kernel.org/stable/c/6ab753b5d8e521616cd9bd10b09891cbeb7e0235
- https://git.kernel.org/stable/c/96ec90412ceb58c73fd3714e40ab2cee1eedac3b
FAQ
What is CVE-2025-40299?
CVE-2025-40299 is a documented vulnerability. In the Linux kernel, the following vulnerability has been resolved: gve: Implement gettimex64 with -EOPNOTSUPP gve implemented a ptp_clock for sole use of do_aux_work at this time. ptp_clock_gettime...
How severe is CVE-2025-40299?
CVSS scoring is not yet available for CVE-2025-40299. Check NVD for updates.
Is there a patch for CVE-2025-40299?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.