CVE-2025-40298 | Linux Kernel up to 6.17.7 gve ptp_clock_settime null pointer dereference (WID-SEC-2025-2756)

A vulnerability marked as critical has been reported in Linux Kernel up to 6.17.7. The impacted element is the function ptp_clock_settime of the component gve. Performing a manipulation results in null pointer dereference.

This vulnerability is reported as CVE-2025-40298. The attacker must have access to the local network to execute the attack. No exploit exists.

It is suggested to upgrade the affected component.