CVE-2025-40057

A flaw was found in the Linux kernel's PTP (Precision Time Protocol) subsystem. In max_vclocks_store(), when a user provides an excessively large value for the maximum number of virtual clocks, the subsequent kcalloc() call cannot handle the allocation request, triggering a kernel WARNING. A local user with access to the PTP sysfs interface could exploit this to cause a denial of service.

This vulnerability requires local access and permissions to write to PTP sysfs attributes. The impact is limited to triggering a kernel warning and potential denial of service. Systems not using PTP virtual clocks are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.