Skip to content
CVE PROGRAM SOURCE RECORD7.9 High

CVE-2026-72312

octeontx2-af: fix VF bringup affecting PF promiscuous state

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix VF bringup affecting PF promiscuous state Mbox handling of nix_set_rx_mode for a VF with promiscuous and all_multi flags set to false causes deletion of the PF's promiscuous and allmulti MCAM rules. This occurs because the APIs that enable/disable these rules operate only on the PF, even when the mbox request is made via a VF interface. Guard both rvu_npc_enable_allmulti_entry() and rvu_npc_enable_promisc_entry() disable paths with an is_vf() check so that a VF bringing up or tearing down its interface cannot inadvertently clear the PF's MCAM rules.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 967db3529ecac305d230aa4e60abddf6ab63543a to < daa2451640a3e0727fd598f5c2ccb8bb4d5a8b9caffected
  • 967db3529ecac305d230aa4e60abddf6ab63543a to < 212c59e5e416859579272288fd325148fc316109affected
  • 967db3529ecac305d230aa4e60abddf6ab63543a to < 53e17d9ed779ad25870abb9c31bc294c71a2278caffected
  • 967db3529ecac305d230aa4e60abddf6ab63543a to < 3de77d2f34c2bc2acaedabc2c5e0a561b85c283aaffected
  • 967db3529ecac305d230aa4e60abddf6ab63543a to < 3cf83432e0561aef6d7ec2664909d12d0ff0ffc1affected
  • 967db3529ecac305d230aa4e60abddf6ab63543a to < fabb881df322da25442f98d23f5fa371e3c78ec4affected

Linux Linux

Default version status: affected

  • 5.14affected
  • 0 to < 5.14unaffected
  • 6.1.178 to ≤ 6.1.*unaffected
  • 6.6.145 to ≤ 6.6.*unaffected
  • 6.12.97 to ≤ 6.12.*unaffected
  • 6.18.40 to ≤ 6.18.*unaffected
  • 7.1.5 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References