Description
A flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a little-endian architecture as a PTP transparent clock, a remote attacker could send a crafted one-step sync message to cause an information leak or crash. The highest threat from this vulnerability is to data confidentiality and system availability. This flaw affects linuxptp versions before 3.1.1 and before 2.0.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | linuxptp | linuxptp 3.1.1, linuxptp 2.0.1 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linuxptp | 3.1-2.1 | — |
| Debian 13 | linuxptp | 3.1-2.1 | — |
| Debian 12 | linuxptp | 3.1-2.1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | linuxptp | 3.1.1-1.el8 | RHSA-2021:4321 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 8 | linuxptp | 3.1.1-1.el8 | ALSA-2021:4321 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | linuxptp | 3.1.1-1.el8 | RLSA-2021:4321 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | linuxptp | 2.0-2.amzn2.1.2 | ALAS2-2021-1705 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | linuxptp | 3.1.1-1.el8 | ELSA-2021-4321 |
Advisories 6
- ALSA-2021:4321 Moderate: linuxptp security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- WID-SEC-2022-0571 Red Hat Enterprise Linux: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 28, 2026
- RLSA-2021:4321 Moderate: linuxptp security, bug fix, and enhancement update Rocky Linux Security Advisories · Feb 5, 2026
- RHSA-2021:4321 Red Hat Security Advisory: linuxptp security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 22, 2025
- ELSA-2021-4321 Moderate: linuxptp security, bug fix, and enhancement update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 16, 2021
- ALAS2-2021-1705 Moderate: linuxptp security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Sep 15, 2021
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1966241
- FEDORA-2021-1b42c2f458 vendor-advisory
- FEDORA-2021-a5b584004c vendor-advisory