The ptp_s390 driver in the Linux kernel incorrectly registers a physical clock when facility 28 is not present. This omission constitutes an access control flaw (CWE‑280) that could allow the kernel to expose time‑keeping capabilities it should not. If a physical clock is mistakenly registered, system components depending on precise PTP timing could experience incorrect time adjustments, potentially leading to availability or integrity issues for time‑sensitive applications.

Any Linux kernel built for the s390 architecture that includes the ptp_s390 driver and has not yet incorporated the patch adding the facility check is vulnerable. No specific release range is listed, so kernels prior to the commit identified in the patch are potentially affected. The vulnerability applies universally across s390 kernel builds regardless of distribution, as reflected by the CPE string "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*".

The CVSS score of 7.3 indicates high severity. The EPSS score of <1% suggests a very low likelihood of exploitation. It is not included in the CISA KEV catalog. Based on the description, it is inferred that exploitation would require kernel‑level privileges or physical access to interact with the ptp_s390 driver. The flaw is local in nature and could allow a privileged user to register a physical clock incorrectly, leading to timing errors that affect system availability or integrity. While no public exploitation is documented, the combination of high severity and potential impact warrants timely remediation.