octeontx2-af: fix VF bringup affecting PF promiscuous state
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.1.178, 6.6.145, 6.12.97, 6.18.40, 7.1.5
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix VF bringup affecting PF promiscuous state Mbox handling of nix_set_rx_mode for a VF with promiscuous and all_multi flags set to false causes deletion of the PF's promiscuous and allmulti MCAM rules. This occurs because the APIs that enable/disable these rules operate only on the PF, even when the mbox request is made via a VF interface. Guard both rvu_npc_enable_allmulti_entry() and rvu_npc_enable_promisc_entry() disable paths with an is_vf() check so that a VF bringing up or tearing down its interface cannot inadvertently clear the PF's MCAM rules.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
From 967db3529ecac305d230aa4e60abddf6ab63543a · fixed in daa2451640a3e0727fd598f5c2ccb8bb4d5a8b9c; From 967db3529ecac305d230aa4e60abddf6ab63543a · fixed in 212c59e5e416859579272288fd325148fc316109; From 967db3529ecac305d230aa4e60abddf6ab63543a · fixed in 53e17d9ed779ad25870abb9c31bc294c71a2278c; From 967db3529ecac305d230aa4e60abddf6ab63543a · fixed in 3de77d2f34c2bc2acaedabc2c5e0a561b85c283a; From 967db3529ecac305d230aa4e60abddf6ab63543a · fixed in 3cf83432e0561aef6d7ec2664909d12d0ff0ffc1; From 967db3529ecac305d230aa4e60abddf6ab63543a · fixed in fabb881df322da25442f98d23f5fa371e3c78ec4
- Linux Linux
5.14
- KernelLinux
From 5.14.0 · fixed in 6.1.178; From 6.2.0 · fixed in 6.6.145; From 6.7.0 · fixed in 6.12.97; From 6.13.0 · fixed in 6.18.40; From 6.19.0 · fixed in 7.1.5