7.9

CVE-2026-72312

octeontx2-af: fix VF bringup affecting PF promiscuous state

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-af: fix VF bringup affecting PF promiscuous state

Mbox handling of nix_set_rx_mode for a VF with promiscuous and
all_multi flags set to false causes deletion of the PF's promiscuous
and allmulti MCAM rules. This occurs because the APIs that
enable/disable these rules operate only on the PF, even when the
mbox request is made via a VF interface.

Guard both rvu_npc_enable_allmulti_entry() and
rvu_npc_enable_promisc_entry() disable paths with an is_vf() check so
that a VF bringing up or tearing down its interface cannot inadvertently
clear the PF's MCAM rules.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 967db3529ecac305d230aa4e60abddf6ab63543a
Version < daa2451640a3e0727fd598f5c2ccb8bb4d5a8b9c
Status affected
Version 967db3529ecac305d230aa4e60abddf6ab63543a
Version < 212c59e5e416859579272288fd325148fc316109
Status affected
Version 967db3529ecac305d230aa4e60abddf6ab63543a
Version < 53e17d9ed779ad25870abb9c31bc294c71a2278c
Status affected
Version 967db3529ecac305d230aa4e60abddf6ab63543a
Version < 3de77d2f34c2bc2acaedabc2c5e0a561b85c283a
Status affected
Version 967db3529ecac305d230aa4e60abddf6ab63543a
Version < 3cf83432e0561aef6d7ec2664909d12d0ff0ffc1
Status affected
Version 967db3529ecac305d230aa4e60abddf6ab63543a
Version < fabb881df322da25442f98d23f5fa371e3c78ec4
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.14
Status affected
Version 0
Version < 5.14
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.97
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.15% 0.051
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.9 2 5.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/daa2451640a3e0727fd598f5c2ccb8bb4d5a8b9c
https://git.kernel.org/stable/c/212c59e5e416859579272288fd325148fc316109
https://git.kernel.org/stable/c/53e17d9ed779ad25870abb9c31bc294c71a2278c
https://git.kernel.org/stable/c/3de77d2f34c2bc2acaedabc2c5e0a561b85c283a
https://git.kernel.org/stable/c/3cf83432e0561aef6d7ec2664909d12d0ff0ffc1
https://git.kernel.org/stable/c/fabb881df322da25442f98d23f5fa371e3c78ec4