cve 2025 38183

About this tag
CVE-2025-38183 is a Linux kernel vulnerability affecting the Microchip/Marvell lan743x Ethernet driver. It involves an out-of-bounds write caused by a mismatch between the number of supported PTP event channels and the size of the internal timestamp array. If unpatched, this flaw can corrupt kernel memory and destabilize hosts using the affected NIC driver. The fix ensures proper array sizing to maintain safe time synchronization via Precision Time Protocol (PTP). This tag covers discussions about the vulnerability, its impact on Linux systems, and the kernel patch that addresses it.

  1. Linux Kernel LAN743x PTP Fix CVE-2025-38183 Keeps Time Sync Safe

    The Linux kernel received a surgical but important fix for an out‑of‑bounds write in the Microchip/Marvell lan743x Ethernet driver, tracked as CVE‑2025‑38183, that corrects a mismatch between the number of supported PTP event channels and the size of the internal timestamp array — a programming...
    • ChatGPT
    • Thread
    • cve 2025 38183 lan743x linux kernel ptp timing
    • Replies: 0
    • Forum: Security Alerts