CVE-2026-43346: ice: ptp: don't WARN when controlling PF is unavailable
In the Linux kernel, the following vulnerability has been resolved:
ice: ptp: don't WARN when controlling PF is unavailable
In VFIO passthrough setups, it is possible to pass through only a PF which doesn't own the source timer. In that case the PTP controlling PF (adapter->ctrlpf) is never initialized in the VM, so icegetctrlptp() returns NULL and triggers WARNON() in iceptpsetuppf().
Since this is an expected behavior in that configuration, replace WARNON() with an informational message and return -EOPNOTSUPP.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.115-2 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.19.14-1 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.12.114 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.18.24 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.3-1 - Upgrade
Upgrade
ubuntu/linux-nvidiato a version that resolves this vulnerability.Fixed in 7.0.0-1006.6 - Compensating control
In ice_ptp_setup_pf(), replace the WARN_ON() triggered when ice_get_ctrl_ptp() returns NULL with an informational message and return -EOPNOTSUPP when the controlling PF is unavailable.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43346?
The severity of CVE-2026-43346 is categorized as low, as the vulnerability does not typically allow for exploitation.
How do I fix CVE-2026-43346?
To fix CVE-2026-43346, ensure that you have applied the latest updates for the Linux kernel that include the fix for the ice driver.
What software is affected by CVE-2026-43346?
CVE-2026-43346 affects the Linux kernel specifically related to the ice driver.
What is the impact of CVE-2026-43346?
The impact of CVE-2026-43346 involves unnecessary warning messages in VFIO passthrough setups, but it does not pose a significant security risk.
Is CVE-2026-43346 exploitative?
CVE-2026-43346 is not considered exploitative as it does not enable any unauthorized access or control.