CVE-2026-53222CWE-401

CVE-2026-53222

Medium · published June 25, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
1.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ptp: ocp: fix resource freeing order

Commit a60fc3294a37 ("ptp: rework ptp_clock_unregister() to disable

events") added a call to ptp_disable_all_events() which changes the

configuration of pins if they support EXTTS events. In ptp_ocp_detach()

pins resources are freed before ptp_clock_unregister() and it leads to

use-after-free during driver removal. Fix it by changing the order of

free/unregister calls. To avoid irq handler running on the other core

while ptp device unregistering, call synchronize_irq() after HW is

configured to stop producing irqs and no irqs are in-flight.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00117 · 1.6th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2026-06-25T13:16Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel≥ 6.18, < 7.0.137.0.13
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (3)
EPSS history
Timeline
  • 25 JUN 08:39Z
    ptp: ocp: fix resource freeing order
    cvelistv5