CVE-2026-43346

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-05-08 Modified: 2026-11-11 First seen: 2026-11-06 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: ice: ptp: don't WARN when controlling PF is unavailable In VFIO passthrough setups, it is possible to pass through only a PF which doesn't own the source timer. In that case the PTP controlling PF (adapter->ctrl_pf) is never initialized in the VM, so ice_get_ctrl_ptp() returns NULL and triggers WARN_ON() in ice_ptp_setup_pf(). Since this is an expected behavior in that configuration, replace WARN_ON() with an informational message and return -EOPNOTSUPP.

Weakness Classification (1)

Affected Software (14)

VendorProductVersion
Linux Linux 2f59743be4d9568cad2d9cf697d1b897975421ed < 228497715a162d040df1617e62c3b7d0df54b235
Linux Linux e800654e85b5b27966fc6493201f5f8cf658beb6 < e19675b384e9dcaca1bd5e4a67b8ad136eccfbe8
Linux Linux e800654e85b5b27966fc6493201f5f8cf658beb6 < c73f365707d3b1b78b7d16e1f029020d1ae50d0f
Linux Linux e800654e85b5b27966fc6493201f5f8cf658beb6 < bb3f21edc7056cdf44a7f7bd7ba65af40741838c
Linux Linux 6.12.11 < 6.12.114
Linux Linux 6.13
linux linux_kernel 6.12.11 – 6.13
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.11%
Raw Score 0.001140
Percentile 1.5%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00114
2026-11-12
0.00114
2026-11-10
0.00114
2026-11-09
0.00114
2026-11-08
0.00114
2026-11-07
0.00114
2026-11-06
0.00114

Intelligence Sources

mitre ref →
nvd ref →