CVE-2026-31396

A flaw was found in the Linux kernel's Media Access Controller MACB Ethernet driver and Precision Time Protocol PTP clock subsystem. A local attacker could exploit a use-after-free vulnerability by accessing the PTP clock via the gettsinfo ethtool call after the PTP clock has been deallocated. Th...

CVE-2026-31396

In the Linux kernel, the following vulnerability has been resolved: net: macb: fix use-after-free access to PTP clock PTP clock is registered on every opening of the interface and destroyed on every closing. However it may be accessed via gettsinfo ethtool call which is possible while the interfa...

UBUNTU-CVE-2026-31396

In the Linux kernel, the following vulnerability has been resolved: net: macb: fix use-after-free access to PTP clock PTP clock is registered on every opening of the interface and destroyed on every closing. However it may be accessed via gettsinfo ethtool call which is possible while the interfa...

CVE-2026-31396 net: macb: fix use-after-free access to PTP clock

In the Linux kernel, the following vulnerability has been resolved: net: macb: fix use-after-free access to PTP clock PTP clock is registered on every opening of the interface and destroyed on every closing. However it may be accessed via gettsinfo ethtool call which is possible while the interfa...

CVE-2026-31396 net: macb: fix use-after-free access to PTP clock

In the Linux kernel, the following vulnerability has been resolved: net: macb: fix use-after-free access to PTP clock PTP clock is registered on every opening of the interface and destroyed on every closing. However it may be accessed via gettsinfo ethtool call which is possible while the interfa...

CVE-2026-31396

In the Linux kernel, the following vulnerability has been resolved: net: macb: fix use-after-free access to PTP clock PTP clock is registered on every opening of the interface and destroyed on every closing. However it may be accessed via gettsinfo ethtool call which is possible while the interfa...

CVE-2026-31396

Summary: CVE-2026-31396 affects the Linux kernel’s net/macb and PTP clock subsystem. The root cause is a use-after-free in ptp_clock_index() when the PTP clock is accessed via get_ts_info while the interface’s PTP clock object has been deregistered. This allows a local attacker to trigger a crash...

The vulnerability of the cmdq_get_clocks() function in the drivers/mailbox/mtk-cmdq-mailbox.c file of the Linux kernel’s mailbox support module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cmdqgetclocks function in the drivers/mailbox/mtk-cmdq-mailbox.c file of the Linux kernel’s mailbox support module is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow ...

The vulnerability of the clk_branch_wait() function in the drivers/clk/qcom/clk-branch.c file of the Linux operating system’s Samsung Exynos CPU controller driver allows a hacker to cause a system failure.

The vulnerability of the clkbranchwait function in the drivers/clk/qcom/clk-branch.c file of the Samsung Exynos Linux operating system’s clock controller driver is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the imx_clk_scu_alloc_dev() function in the drivers/clk/imx/clk-scu.c driver for the Samsung Exynos CPU in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the imxclkscuallocdev function in the drivers/clk/imx/clk-scu.c driver for the Samsung Exynos CPU in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the visconti_register_pll() function in the drivers/clk/visconti/pll.c file of the Linux operating system’s Samsung Exynos CPU controller driver allows a hacker to cause a system failure.

The vulnerability of the viscontiregisterpll function in the drivers/clk/visconti/pll.c file of the Samsung Exynos Linux operating system’s clock controller driver is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the st_of_quadfs_setup() function in the drivers/clk/st/clkgen-fsyn.c file of the Linux operating system’s Samsung Exynos processor controller driver allows a hacker to cause a service failure.

The vulnerability of the stofquadfssetup function in the drivers/clk/st/clkgen-fsyn.c file of the Samsung Exynos CPU driver for Linux operating systems is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

PT-2026-36432

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Linux kernel's macb network driver during PCI glue driver removal. The platform device unregister function may attempt to use registered clocks durin...

The vulnerability of the tegra210_clock_init() function in the drivers/clk/tegra/clk-tegra210.c file of the Linux operating system’s Samsung Exynos processor controller driver allows a hacker to cause a service failure.

The vulnerability of the tegra210clockinit function in the drivers/clk/tegra/clk-tegra210.c file of the Linux operating system’s Samsung Exynos processor controller driver is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the tegra20_clock_init() function in the drivers/clk/tegra/clk-tegra20.c file of the Linux operating system’s Samsung Exynos processor control chip driver allows a hacker to cause a service failure.

The vulnerability of the tegra20clockinit function in the drivers/clk/tegra/clk-tegra20.c file of the Linux kernel driver for Samsung Exynos processors is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the ptp_clock_register() function in the drivers/ptp/ptp_clock.c module of the Linux operating system’s PTP clock support driver allows a hacker to cause a service failure.

The vulnerability of the ptpclockregister function in the drivers/ptp/ptpclock.c module of the Linux operating system’s time support driver lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the _samsung_clk_register_pll() function in the drivers/clk/samsung/clk-pll.c file of the Samsung Exynos CPU frequency controller driver for Linux operating systems allows a hacker to cause a system failure.

The vulnerability of the samsungclkregisterpll function in the drivers/clk/samsung/clk-pll.c file of the Samsung Exynos CPU frequency controller driver in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system...

The vulnerability of the imx_clk_scu_alloc_dev() function in the drivers/clk/imx/clk-scu.c file of the Linux operating system control chip driver for Samsung Exynos cores allows a hacker to cause a service failure.

The vulnerability of the imxclkscuallocdev function in the drivers/clk/imx/clk-scu.c file of the Linux operating system controller driver for Samsung Exynos cores is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the definition of the structure loongson2_clk_type{} in the driver drivers/clk/clk-loongson2.c of the Linux kernel’s software synchronization driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability in determining the structure of loongson2clktype in the drivers/clk/clk-loongson2.c file of the Linux kernel synchronization driver relates to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...

PT-2026-51950

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A mismatch between power and frequency occurs during DPU runtime suspend. Calling the function dev pm opp set ratedev, 0 drops the MMCX rail to MIN SVS while the core clock frequency...