CVE Database›Document archive›CVE-2026-43346

CVE-2026-43346

kernel: ice: ptp: don't WARN when controlling PF is unavailable

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · May 8, 2026

Updated · November 3, 2026

Description

A flaw was found in the Linux kernel's Intel Ethernet driver (ice). In virtualized environments using device passthrough, configuring a secondary network interface without its primary timer-controlling function leads to an unhandled condition during Precision Time Protocol (PTP) setup. A local user within a guest virtual machine can trigger this flaw during interface initialization, causing an unexpected kernel warning that can lead to a denial of service (DoS) if the system is configured to halt on warnings.

Statement

This vulnerability is rated as Moderate impact because it requires local access within a virtual machine or hypervisor configured with specific Intel E800 series VFIO device passthrough, significantly limiting real-world exposure. In setups where a secondary physical function is assigned to a guest without the primary timer-controlling function, the guest kernel triggers a warning assertion during interface initialization. The issue is restricted to a denial-of-service condition under specific configurations and does not allow unauthorized code execution or privilege escalation.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-617 · Reachable Assertion