PT-2026-30179
CVE-2026-31396
·
Published
2026-03-18
·
Updated
2026-10-19
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.1.164+
Description
The Linux kernel contained a use-after-free issue in the networking subsystem related to the macb driver and the PTP (Precision Time Protocol) clock. Specifically, the PTP clock could be accessed via the
get ts info ethtool call even after it had been freed, leading to a potential crash or other undefined behavior. The issue occurs during interface opening and closing, where the PTP clock is registered and destroyed. The vulnerability is triggered by the gem get ts info and macb get ts info functions.Recommendations
Update the Linux kernel to version 6.1.164+ or later.
Found an issue in the description? Have something to add? Feel free to write us 👾