In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
ptp: netc: fix period truncation and potential divide-by-zero in PEROUT<\/p>\n
The max_period bound in net_timer_enable_perout() was computed as:<\/p>\n
max_period = (u64)NETC_TMR_DEFAULT_FIPER + integral_period;<\/p>\n
which exceeds U32_MAX when integral_period > 0 (e.g. 0x100000002 for
\nthe default 333333333 Hz clock). A period_ns that passes this check but
\nexceeds U32_MAX is then silently truncated when stored into the u32
\nstruct netc_pp::period field.<\/p>\n
A truncated value of zero can reach netc_timer_set_perout_alarm(), where
\nthe local u32 period variable would also be 0, causing a divide-by-zero
\nin roundup_u64(delta, period) whenever the stime period – integral_period;<\/p>\n
A zero pp->period results in an unsigned wraparound to 0xFFFFFFFD,
\nmis-programming the FIPER hardware register.<\/p>\n
Fix all three issues by capping max_period at NETC_TMR_DEFAULT_FIPER
\n(0xFFFFFFFF). This ensures that any period_ns passing the range check
\nfits in a u32 without truncation, so the stored value is always valid
\nand non-zero. The accepted range is reduced by integral_period ns
\n(typically only a few nanoseconds), which is negligible in practice.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
ptp: netc: fix period truncation and potential divide-by-zero in PEROUT<\/p>\n
The max_period bound in net_timer_enable_perout() was comp<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-25509","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/25509","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=25509"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=25509"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=25509"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}