In the Linux kernel, the following vulnerability has been resolved:
net: dsa: qca8k: reset cpu port on MTU change
It was discovered that the Documentation lacks of a fundamental detail on how to correctly change the MAX_FRAME_SIZE of the switch.
In fact if the MAX_FRAME_SIZE is changed while the cpu port is on, the switch panics and cease to send any packet. This cause the mgmt ethernet system to not receive any packet (the slow fallback still works) and makes the device not reachable. To recover from this a switch reset is required.
To correctly handle this, turn off the cpu ports before changing the MAX_FRAME_SIZE and turn on again after the value is applied.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 27, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-lowlatencyUpgrade linux-riscv-5.15Upgrade linux-aws-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-raspiUpgrade linux-gkeUpgrade linuxUpgrade linux-awsUpgrade linux-gcpUpgrade linux-oracle-5.15Upgrade linux-ibmUpgrade linux-hwe-5.15Upgrade linux-azure-5.15Upgrade linux-intel-iotgUpgrade linux-realtimeUpgrade linux-nvidiaUpgrade linux-oracleUpgrade linux-kvmUpgrade linux-azureUpgrade linux-intel-iotg-5.15Upgrade linux-gcp-5.15Upgrade linux-gkeop | Mar 19, 2025 | Feb 26, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub