GPU VulnDB

Database/Control plane, storage & DevOps

linuxptp / ptp4l (transparent clock on little-endian): A crafted PTP packet against ptp4l running as a transparent

CVE-2021-3571Control plane, storage & DevOpscurated

Impact

A crafted PTP packet against ptp4l running as a transparent clock on a little-endian machine — i.e. every x86 and ARM64 server in your cluster — produces a fault. Transparent-clock mode is exactly the configuration used when PTP is carried across switches inside the cluster, so the affected deployment is the mainstream one, not an edge case.

Who can reach it

Remote, unauthenticated — a crafted PTP message from anything that can reach the node's PTP port.

What to do

linuxptp package upgrade plus ptp4l restart. Same segmentation advice as the companion issue: PTP traffic should not be sourceable by tenant workloads.

References

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.