Medium 5.5Published Jun 25, 2026

CVE-2026-53222ptp: ocp: fix resource freeing order

Updated under an hour ago (2026-10-19 06:25 UTC)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: fix resource freeing order Commit a60fc3294a37 ("ptp: rework ptp_clock_unregister() to disable events") added a call to ptp_disable_all_events() which changes the configuration of pins if they support EXTTS events. In ptp_ocp_detach() pins resources are freed before ptp_clock_unregister() and it leads to use-after-free during driver removal. Fix it by changing the order of free/unregister calls. To avoid irq handler running on the other core while ptp device unregistering, call synchronize_irq() after HW is configured to stop producing irqs and no irqs are in-flight.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 15, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from a60fc3294a377204664b5484e4a487fa124155da before daacc9d1430b63f6bee6e5646def5d6414d35c4e; from a60fc3294a377204664b5484e4a487fa124155da before aa03698bb28d3be5ee180adb185395054b342b04; from a60fc3294a377204664b5484e4a487fa124155da before 627366c51145a07f675b1800fb5ea2ec960bd900	CNA record
linux linux_kernel linux:linux_kernel	from 6.18 before 7.0.13; 7.1; 7.1; 7.1; 7.1; 7.1; 7.1; 7.1	NVD

References

https://git.kernel.org/stable/c/daacc9d1430b63f6bee6e5646def5d6414d35c4e
https://git.kernel.org/stable/c/aa03698bb28d3be5ee180adb185395054b342b04patch
https://git.kernel.org/stable/c/627366c51145a07f675b1800fb5ea2ec960bd900patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.