CVE-2026-43173

net: ethernet: xscale: Check for PTP support properly

published May 6, 2026

CVSS
—
EPSS
0%
Percentile
5.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: xscale: Check for PTP support properly

In ixp4xx_get_ts_info() ixp46x_ptp_find() is called

unconditionally despite this feature only existing on

ixp46x, leading to the following splat from tcpdump:

root@OpenWrt:~# tcpdump -vv -X -i eth0

(...)

Unable to handle kernel NULL pointer dereference at virtual address

00000238 when read

(...)

Call trace:

ptp_clock_index from ixp46x_ptp_find+0x1c/0x38

ixp46x_ptp_find from ixp4xx_get_ts_info+0x4c/0x64

ixp4xx_get_ts_info from __ethtool_get_ts_info+0x90/0x108

__ethtool_get_ts_info from __dev_ethtool+0xa00/0x2648

__dev_ethtool from dev_ethtool+0x160/0x234

dev_ethtool from dev_ioctl+0x2cc/0x460

dev_ioctl from sock_ioctl+0x1ec/0x524

sock_ioctl from sys_ioctl+0x51c/0xa94

sys_ioctl from ret_fast_syscall+0x0/0x44

(...)

Segmentation fault

Check for ixp46x in ixp46x_ptp_find() before trying to set up

PTP to avoid this.

To avoid altering the returned error code from ixp4xx_hwtstamp_set()

which before this patch was -EOPNOTSUPP, we return -EOPNOTSUPP

from ixp4xx_hwtstamp_set() if ixp46x_ptp_find() fails no matter

the error code. The helper function ixp46x_ptp_find() helper

returns -ENODEV.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.0th percentile
Published
2026-05-06T11:27Z
EPSS history
Timeline
  • 06 MAY 11:27Z
    net: ethernet: xscale: Check for PTP support properly
    cvelistv5