PT-2026-30179 · Ptp Clock+2 · Ptp Clock+2

Published 2026-04-03 · Updated 2026-04-20 · CVE-2026-31396

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.164+

Description The Linux kernel contained a use-after-free issue in the networking subsystem related to the macb driver and the PTP (Precision Time Protocol) clock. Specifically, the PTP clock could be accessed via the get ts info ethtool call even after it had been freed, leading to a potential crash or other undefined behavior. The issue occurs during interface opening and closing, where the PTP clock is registered and destroyed. The vulnerability is triggered by the gem get ts info and macb get ts info functions.

Recommendations Update the Linux kernel to version 6.1.164+ or later.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-31396

ECHO-A2A8-02E8-2C97

Affected Products

Linux Kernel

Ptp Clock

Macb

References · 22

• https://git.kernel.org/stable/c/5653af416a48f6c18f9626ae9df96f814f45ff34 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-31396 · Vendor Advisory
• https://git.kernel.org/stable/c/8820ffe0975fd2efbe50453e9179c8e1c33a13d3 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31396 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31396 · Security Note
• https://git.kernel.org/stable/c/6b757f345eeea87ed5d8afd6de35b927a1a57a2f · Patch
• https://cve.org/CVERecord?id=CVE-2026-31396 · Security Note
• https://git.kernel.org/stable/c/341d01087f821aa0f165fb1ffc8bfe4e50776da7 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31396 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2026-31396 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31396 · Vendor Advisory
• https://git.kernel.org/stable/c/8da13e6d63c1a97f7302d342c89c4a56a55c7015 · Patch
• https://git.kernel.org/stable/c/0bb848d8c64938024e45780f8032f1f67d3a3607 · Patch
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2026-31396 · Vendor Advisory
• https://git.kernel.org/stable/c/1f4714065b2bcbb0a4013fd355b84b848e6cc345 · Patch