CVE-2025-39859

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a use-after-free issue within the ptp ocp watchdog function. The ptp ocp detach() function only shuts down the watchdog timer if it is pending. If the timer handler is already running, timer delete sync() is not called, leading to a race condition where the device link containing the ptp ocp is deallocated while the timer handler is still accessing it. This results in a use-after-free condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.