The Linux kernel contains a use‑after‑free flaw in the PTP OC driver. When the driver is unloaded, its resources are freed before the clock has been unregistered, causing memory corruption that an attacker could leverage to crash the kernel or execute arbitrary code. This weakness arises from an improper order of resource freeing introduced by earlier changes to the clock handling API.

The vulnerability affects Linux kernel builds that include the PTP OC driver prior to the integration of commits a60fc3294a37 and aa03698bb28d3be5ee180adb185395054b342b04. All kernel releases that have not applied these commits are susceptible.

The CVSS score is 5.5, indicating a moderate severity. The EPSS score is below 1%, indicating a very low probability of exploitation. The vulnerability stems from improper resource freeing order in the PTP OC driver, reflecting CWE-401. An attacker with kernel privileges could trigger a use‑after‑free during driver removal, potentially leading to a kernel crash or arbitrary code execution. The vulnerability is not yet listed in the CISA KEV catalog. Based on the description, the likely attack vector involves a privileged attacker unloading or removing the PTP OC driver, which could occur during system maintenance or malicious activity.