# CVE-2026-43173: linux: In the Linux kernel, the following vulnerability has been resolved:  net: ethernet: xscale: Check for PTP support pro...

CVE-2026-43173 is fixed in linux on 1 platform, first by DEBIAN-CVE-2026-43173, released May 15, 2026. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2026-43173
- Priority: Routine
- CVSS: 5.5 (medium)
- EPSS: 0.0012
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: May 6, 2026

## Description

In the Linux kernel, the following vulnerability has been resolved:  net: ethernet: xscale: Check for PTP support properly  In ixp4xx_get_ts_info() ixp46x_ptp_find() is called unconditionally despite this feature only existing on ixp46x, leading to the following splat from tcpdump:  root@OpenWrt:~# tcpdump -vv -X -i eth0 (...) Unable to handle kernel NULL pointer dereference at virtual address   00000238 when read (...) Call trace:  ptp_clock_index from ixp46x_ptp_find+0x1c/0x38  ixp46x_ptp_find from ixp4xx_get_ts_info+0x4c/0x64  ixp4xx_get_ts_info from __ethtool_get_ts_info+0x90/0x108  __ethtool_get_ts_info from __dev_ethtool+0xa00/0x2648  __dev_ethtool from dev_ethtool+0x160/0x234  dev_ethtool from dev_ioctl+0x2cc/0x460  dev_ioctl from sock_ioctl+0x1ec/0x524  sock_ioctl from sys_ioctl+0x51c/0xa94  sys_ioctl from ret_fast_syscall+0x0/0x44  (...) Segmentation fault  Check for ixp46x in ixp46x_ptp_find() before trying to set up PTP to avoid this.  To avoid altering the returned error code from ixp4xx_hwtstamp_set() which before this patch was -EOPNOTSUPP, we return -EOPNOTSUPP from ixp4xx_hwtstamp_set() if ixp46x_ptp_find() fails no matter the error code. The helper function ixp46x_ptp_find() helper returns -ENODEV.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | linux Debian 13.5 (trixie) | 6.12.85-1 | [DEBIAN-CVE-2026-43173](https://patchblox.com/security/data/fix/linux/debian-cve-2026-43173.md) | May 15, 2026 |
| Linux | linux Debian 14 | 6.19.6-1 | [DEBIAN-CVE-2026-43173](https://patchblox.com/security/data/fix/linux/debian-cve-2026-43173.md) | May 15, 2026 |

---

Data as of 2026-11-09T01:18:40Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.