Riskcovery

CVE-2024-40994

ptp: fix integer overflow in max_vclocks_store

State
Published
Severity
Not scored
Published
Jul 12, 2024
Updated
May 11, 2026
Reserved
Jul 12, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ptp: fix integer overflow in max_vclocks_store

On 32bit systems, the "4 * max" multiply can overflow. Use kcalloc() to do the allocation to prevent this.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 44c494c8e30e35713c7d11ca3c5ab332cbfabacf to before 4b03da87d0b7074c93d9662c6e1a8939f9b8b86eAffected
  • 44c494c8e30e35713c7d11ca3c5ab332cbfabacf to before d50d62d5e6ee6aa03c00bddb91745d0b632d3b0fAffected
  • 44c494c8e30e35713c7d11ca3c5ab332cbfabacf to before 666e934d749e50a37f3796caaf843a605f115b6fAffected
  • 44c494c8e30e35713c7d11ca3c5ab332cbfabacf to before e1fccfb4638ee6188377867f6015d0ce35764a8eAffected
  • 44c494c8e30e35713c7d11ca3c5ab332cbfabacf to before 81d23d2a24012e448f651e007fac2cfd20a45ce0Affected
LinuxLinux
  • 5.14Affected
  • before 5.14Not affected
  • 5.15.162 through 5.15.*Not affected
  • 6.1.96 through 6.1.*Not affected
  • 6.6.36 through 6.6.*Not affected
  • 6.9.7 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.