CVE-2025-40299: gve: Implement gettimex64 with -EOPNOTSUPP

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-12-08 · updated 2026-10-14

Description

In the Linux kernel, the following vulnerability has been resolved: gve: Implement gettimex64 with -EOPNOTSUPP gve implemented a ptp_clock for sole use of do_aux_work at this time. ptp_clock_gettime() and ptp_sys_offset() assume every ptp_clock has implemented either gettimex64 or gettime64. Stub gettimex64 and return -EOPNOTSUPP to prevent NULL dereferencing.

Affected products

Linux kernel: 6.17 — fixed in 6.18

How to fix

Upgrade to a fixed version: Linux kernel 6.18. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/6ab753b5d8e521616cd9bd10b09891cbeb7e0235
https://git.kernel.org/stable/c/96ec90412ceb58c73fd3714e40ab2cee1eedac3b

Get alerted when CVE-2025-40299 or the next vulnerability affects your stack