CVE-2026-12632

In Zephyr RTOS, ptp_msg_post_recv() in subsys/net/lib/ptp/msg.c indexes the 14-entry msg_size[] table using an attacker-controlled 4-bit message type (0xE/0xF) with no bounds check, causing out-of-bounds reads and writes via msg_tlv_post_recv(). Any host on the same link can trigger a crash (CVSS...

SUSE CVE-2026-68133

In the Linux kernel, the following vulnerability has been resolved: ice: fix PTP Call Trace during PTP release If a PF reset occurs when the PTP state is ICEPTPUNINIT, then iceptprebuild will update the state to ICEPTPERROR. This will result in the following PTP release call trace during driver...

SUSE CVE-2026-68134

In the Linux kernel, the following vulnerability has been resolved: ptp: ptps390: Add missing facility check Only register the physical clock when facility 28 is installed and PTFF QAF returns that PTFF QPT is available...

CVE-2026-12632: Out-of-bounds Read

Zephyr's Precision Time Protocol receive handler ptpmsgpostrecv in subsys/net/lib/ptp/msg.c takes the 4-bit message type straight off the wire via ptpmsgtype msg-header.typemajorsdoid & 0xF, range 0-15 and uses it to index the msgsize table. That table only defines entries up to PTPMSGMANAGEMENT...

PT-2026-77336

Name of the Vulnerable Software and Affected Versions Zephyr affected versions not specified Description The Precision Time Protocol PTP receive handler ptp msg post recv in subsys/net/lib/ptp/msg.c fails to perform an upper-bound check on the 4-bit message type obtained via ptp msg type. This...

Linux Distros Unpatched Vulnerability : CVE-2026-72414

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: dsa: sja1105: round up PTP perout pin duration pinduration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the...

CVE-2026-72414

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pinduration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the cycletime argument to futurebasetime. Very small period values may becom...

UBUNTU-CVE-2026-72414

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pinduration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the cycletime argument to futurebasetime. Very small period values may becom...

CVE-2026-72414

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pinduration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the cycletime argument to futurebasetime. Very small period values may becom...

CVE-2026-72414 net: dsa: sja1105: round up PTP perout pin duration

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pinduration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the cycletime argument to futurebasetime. Very small period values may becom...

EUVD-2026-59313

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pinduration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the cycletime argument to futurebasetime. Very small period values may becom...

CVE-2026-72414 net: dsa: sja1105: round up PTP perout pin duration

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: round up PTP perout pin duration pinduration is converted from the user-provided period to SJA1105 clock ticks and is later passed as the cycletime argument to futurebasetime. Very small period values may becom...

CVE-2026-72414

The CVE-2026-72414 entry concerns the Linux kernel component net: dsa: sja1105. The issue arises when pin_duration, derived from a user-provided period, is converted to SJA1105 clock ticks and passed as the cycle_time to future_base_time(); very small values can become zero, causing a division by...

PT-2026-72602

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SJA1105 driver where the pin duration is converted from a user-provided period to clock ticks and subsequently passed as the cycle time argument to the future base...

Linux Distros Unpatched Vulnerability : CVE-2026-68133

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ice: fix PTP Call Trace during PTP release If a PF reset occurs when the PTP state is ICEPTPUNINIT, then iceptprebuild will update the state to ICEPTPERROR. Thi...

DEBIAN-CVE-2026-68134

In the Linux kernel, the following vulnerability has been resolved: ptp: ptps390: Add missing facility check Only register the physical clock when facility 28 is installed and PTFF QAF returns that PTFF QPT is available...

DEBIAN-CVE-2026-68120

In the Linux kernel, the following vulnerability has been resolved: rtase: Workaround for TX hang caused by hardware packet parsing The hardware performs packet parsing before packet transmission. Parsing incomplete IPv4, IPv6, TCP, or UDP headers may trigger a TX hang because the hardware parser...

UBUNTU-CVE-2026-68133

In the Linux kernel, the following vulnerability has been resolved: ice: fix PTP Call Trace during PTP release If a PF reset occurs when the PTP state is ICEPTPUNINIT, then iceptprebuild will update the state to ICEPTPERROR. This will result in the following PTP release call trace during driver...

CVE-2026-68120

In the Linux kernel, the following vulnerability has been resolved: rtase: Workaround for TX hang caused by hardware packet parsing The hardware performs packet parsing before packet transmission. Parsing incomplete IPv4, IPv6, TCP, or UDP headers may trigger a TX hang because the hardware parser...

CVE-2026-68133

In the Linux kernel, the following vulnerability has been resolved: ice: fix PTP Call Trace during PTP release If a PF reset occurs when the PTP state is ICEPTPUNINIT, then iceptprebuild will update the state to ICEPTPERROR. This will result in the following PTP release call trace during driver...