CVE-2026-43346CWE-617

CVE-2026-43346

Medium · published May 8, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
5.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ice: ptp: don't WARN when controlling PF is unavailable

In VFIO passthrough setups, it is possible to pass through only a PF

which doesn't own the source timer. In that case the PTP controlling PF

(adapter->ctrl_pf) is never initialized in the VM, so ice_get_ctrl_ptp()

returns NULL and triggers WARN_ON() in ice_ptp_setup_pf().

Since this is an expected behavior in that configuration, replace

WARN_ON() with an informational message and return -EOPNOTSUPP.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.0th percentile
Weakness
CWE-617 · Reachable Assertion
Published
2026-05-08T18:16Z
Affected products (10)
ProductVersionsFixed in
linux/linux_kernel≥ 6.12.11, < 6.136.13
linux/linux_kernel≥ 6.13, < 6.18.246.18.24
linux/linux_kernel≥ 6.19, < 6.19.146.19.14
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (4)
EPSS history
Timeline
  • 08 MAY 13:39Z
    ice: ptp: don't WARN when controlling PF is unavailable
    cvelistv5