The Linux kernel contains a use‑after‑free flaw in the PTP OC driver. When the driver is unloaded, its resources are freed before the clock has been unregistered, causing memory corruption that an attacker could leverage to crash the kernel or to execute arbitrary code. This weakness arises from an improper order of resource freeing introduced by earlier changes to the clock handling API.

The vulnerability affects Linux kernel builds that include the PTP OC driver prior to the integration of commits a60fc3294a37 and aa03698bb28d3be5ee180adb185395054b342b04. All kernel releases that have not applied these commits are susceptible.

The CVSS score is not publicly available and EPSS information is missing, so the exploitation likelihood is not quantified. Nevertheless, a use‑after‑free in kernel space can severely compromise system integrity if exercised by an attacker with sufficient privileges to unload the driver. The issue is not listed in the CISA KEV catalogue. Based on the description, it is inferred that the likely attack vector involves privileged kernel module removal or reboot activity. The vulnerability could lead to a denial-of-service or potential arbitrary code execution if the exploit is successful.