Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-40994
HistoryJul 12, 2024 - 12:37 p.m.

CVE-2024-40994 ptp: fix integer overflow in max_vclocks_store

2024-07-1212:37:37
Linux
github.com
2
linux
kernel
ptp
integer overflow
vulnerability

AI Score

7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

ptp: fix integer overflow in max_vclocks_store

On 32bit systems, the “4 * max” multiply can overflow. Use kcalloc()
to do the allocation to prevent this.

AI Score

7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial