Description
In the Linux kernel, the following vulnerability has been resolved: ice: Add a per-VF limit on number of FDIR filters While the iavf driver adds a s/w limit (128) on the number of FDIR filters that the VF can request, a malicious VF driver can request more than that and exhaust the resources for other VFs. Add a similar limit in ice.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
1f7ea1cd6a3748427512ccc9582e18cd9efea966 to < e81b674ead8e2172b2a69e7b45e079239ace4dbcaffected1f7ea1cd6a3748427512ccc9582e18cd9efea966 to < 8e02cd98a6e24389d476e28436d41e620ed8e559affected1f7ea1cd6a3748427512ccc9582e18cd9efea966 to < d62389073a5b937413e2d1bc1da06ccff5103c0caffected1f7ea1cd6a3748427512ccc9582e18cd9efea966 to < 292081c4e7f575a79017d5cbe1a0ec042783976faffected1f7ea1cd6a3748427512ccc9582e18cd9efea966 to < 6ebbe97a488179f5dc85f2f1e0c89b486e99ee97affected
Linux Linux
Default version status: affected
5.13affected0 to < 5.13unaffected5.15.172 to ≤ 5.15.*unaffected6.1.103 to ≤ 6.1.*unaffected6.6.44 to ≤ 6.6.*unaffected6.10.3 to ≤ 6.10.*unaffected6.11 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/e81b674ead8e2172b2a69e7b45e079239ace4dbc ↗
- https://git.kernel.org/stable/c/8e02cd98a6e24389d476e28436d41e620ed8e559 ↗
- https://git.kernel.org/stable/c/d62389073a5b937413e2d1bc1da06ccff5103c0c ↗
- https://git.kernel.org/stable/c/292081c4e7f575a79017d5cbe1a0ec042783976f ↗
- https://git.kernel.org/stable/c/6ebbe97a488179f5dc85f2f1e0c89b486e99ee97 ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗