Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's ice driver related to Precision Time Protocol (PTP) handling has been addressed. In Virtual Function I/O (VFIO) passthrough setups, it is possible to pass through a Physical Function (PF) that does not control the source timer. This situation leads to the PTP controlling PF not being initialized in the virtual machine, causing a warning to be triggered when the absence of a controlling PF is detected. The warning has been replaced with an informational message, and the function now returns a 'not supported' error, aligning the behavior with the expected configuration.
The vulnerability could cause unnecessary warning messages to be logged, indicating a problem that does not actually exist in the current configuration.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the updated kernel can be found on the Linux Kernel Archives.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.