CVE-2026-102080

Juniper Networks Junos OS on the MX Series is vulnerable to an Improper Resource Locking vulnerability in the clksyncd clock synchronization daemon. A logically adjacent, unauthenticated attacker can trigger a Denial-of-Service (DoS) by sending malformed SyncE or PTP messages from an upstream nod...

CVE-2026-102080 Junos OS: MX Series: Malformed SyncE or PTP clock input causes continuous RE switchover

An Improper Resource Locking vulnerability in the clock synchronization daemon clksyncd of Juniper Networks Junos OS on MX Series allows a unauthenticated, logically adjacent attacker to cause a Denial-of-Service DoS. If a SyncE or PTP upstream node sends a malformed message to an MX device...

CVE-2026-90100

A flaw was found in the Linux kernel's Precision Time Protocol PTP netc driver. An issue with period calculation can lead to a value being truncated to zero. This truncated value can then cause a divide-by-zero error in the netctimersetperoutalarm function, resulting in a system crash and a Denia...

CVE-2026-90056

A flaw was found in the Linux kernel's net: fec component. The fecptpstop function is unconditionally called during device initialization failure or device removal, even if the Precision Time Protocol PTP was not previously initialized. This incorrect state transition could lead to system...

PTP-RAT

PTP-RAT Exfiltrate data over screen interfaces More information about how the tool works can be found at https://www.pentestpartners.com/security-blog/exfiltration-by-encoding-data-in-pixel-colour-values/...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ptp: A possible memory leak has been fixed in ptpclockregister. I encountered a memory leak during the fault injection test as follows: Unreferenced object: 0xffff88800906c618 size 8 Command: comm "i2c-idt82p33931", PID 4421,...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: fixed a potential out-of-bounds write in lan743xptpioeventclockget. Before calling lan743xptpioeventclockget, the ‘channel’ value is checked against the maximum value of PCI11X1XPTPIOMAXCHANNELS8. This seems correct...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Net: Ethernet: xscale: Ensure proper check for PTP support. In the function ixp4xxgettsinfo, the function ixp46xptpfind is called unconditionally, even though this feature only exists in ixp46x. This leads to the following...

CVE-2026-98050

A flaw was found in the Linux kernel. This vulnerability can lead to a Denial of Service DoS due to a race condition in the Mellanox switch mlxsw driver. When handling Precision Time Protocol PTP traffic, the garbage-collection workqueue and the network polling thread may concurrently modify shar...

DEBIAN-CVE-2026-98050

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumptp: Fix napigroreceive call from GC workqueue context Currently mlxswsp1ptphtgccollect is run from the PTP garbage-collection workqueue, rather than the NAPI poll context. For any unmatched PTP entries carrying an...

PT-2026-98713

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18.48 Description A concurrency issue exists in the mlxsw spectrum PTP implementation. The function mlxsw sp1 ptp ht gc collect is executed from a garbage-collection workqueue rather than the NAPI poll context...

PT-2026-98627

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the ptp lock variable is only initialized during the stmmac open process via the stmmac ptp register function. This leads to undefined behavior because the lock is...

SUSE CVE-2026-90056

In the Linux kernel, the following vulnerability has been resolved: net: fec: only stop PTP if it was initialized fecptpinit is only called when fep-bufdescex is available. However, fecprobe unconditionally calls fecptpstop on the failedinit path, and fecdrvremove unconditionally calls fecptpstop...

SUSE CVE-2026-90100

In the Linux kernel, the following vulnerability has been resolved: ptp: netc: fix period truncation and potential divide-by-zero in PEROUT The maxperiod bound in nettimerenableperout was computed as: maxperiod = u64NETCTMRDEFAULTFIPER + integralperiod; which exceeds U32MAX when integralperiod 0...

Linux Distros Unpatched Vulnerability : CVE-2026-90056

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: fec: only stop PTP if it was initialized fecptpinit is only called when fep-bufdescex is available. However, fecprobe unconditionally calls fecptpstop on t...

Linux Distros Unpatched Vulnerability : CVE-2026-90100

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ptp: netc: fix period truncation and potential divide-by-zero in PEROUT The maxperiod bound in nettimerenableperout was computed as: maxperiod =...

CVE-2026-90100

In the Linux kernel, the following vulnerability has been resolved: ptp: netc: fix period truncation and potential divide-by-zero in PEROUT The maxperiod bound in nettimerenableperout was computed as: maxperiod = u64NETCTMRDEFAULTFIPER + integralperiod; which exceeds U32MAX when integralperiod 0...

CVE-2026-90056

In the Linux kernel, the following vulnerability has been resolved: net: fec: only stop PTP if it was initialized fecptpinit is only called when fep-bufdescex is available. However, fecprobe unconditionally calls fecptpstop on the failedinit path, and fecdrvremove unconditionally calls fecptpstop...

EUVD-2026-81961

In the Linux kernel, the following vulnerability has been resolved: ptp: netc: fix period truncation and potential divide-by-zero in PEROUT The maxperiod bound in nettimerenableperout was computed as: maxperiod = u64NETCTMRDEFAULTFIPER + integralperiod; which exceeds U32MAX when integralperiod 0...

CVE-2026-90100

CVE-2026-90100 affects the Linux kernel PTP (Precision Time Protocol) netc driver. The root cause is a period truncation in net_timer_enable_perout(): a u64 max_period bound exceeds U32_MAX when integral_period > 0, allowing a period_ns value to pass the range check but be silently truncated t...