[ CVE-2026-102485 · Published 21 Oct 2026 ]
Vulnerability in ntpsec
CVSS 5.2
EPSS <1%No fix listed yet
[ Description ]Official description
Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the GPS receiver's serial data to crash ntpd or disclose memory via a PPS Control (@@Gc) reply with an out-of-range mode byte.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.