In the Linux kernel, the following vulnerability has been resolved:
i40e: Do not allow untrusted VF to remove administratively set MAC
Currently when PF administratively sets VF's MAC address and the VF is put down (VF tries to delete all MACs) then the MAC is removed from MAC filters and primary VF MAC is zeroed.
Do not allow untrusted VF to remove primary MAC when it was set administratively by PF.
Reproducer: 1) Create VF 2) Set VF interface up 3) Administratively set the VF's MAC 4) Put VF interface down
[root@host ~]# echo 1 > /sys/class/net/enp2s0f0/device/sriov_numvfs [root@host ~]# ip link set enp2s0f0v0 up [root@host ~]# ip link set enp2s0f0 vf 0 mac fe:6c:b5:da:c7:7d [root@host ~]# ip link show enp2s0f0 23: enp2s0f0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000 link/ether 3c:ec:ef:b7:dd:04 brd ff:ff:ff:ff:ff:ff vf 0 link/ether fe:6c:b5:da:c7:7d brd ff:ff:ff:ff:ff:ff, spoof checking on, link-state auto, trust off [root@host ~]# ip link set enp2s0f0v0 down [root@host ~]# ip link show enp2s0f0 23: enp2s0f0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000 link/ether 3c:ec:ef:b7:dd:04 brd ff:ff:ff:ff:ff:ff vf 0 link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff, spoof checking on, link-state auto, trust off
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftool | Oct 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | Apr 17, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jan 10, 2025 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-azure-develUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-caviumUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade reiserfs-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-docsUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade kernel-azure-livepatch-develUpgrade dtb-alteraUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade gfs2-kmp-azureUpgrade kernel-azure-baseUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-source-vanillaUpgrade kernel-default-manUpgrade dtb-qcomUpgrade kernel-64kb-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-defaultUpgrade kernel-rt-extraUpgrade dlm-kmp-rtUpgrade dtb-marvellUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debugUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade kernel-kvmsmallUpgrade dtb-rockchipUpgrade kernel-obs-qaUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-azureUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-64kb-develUpgrade dtb-armUpgrade kernel-64kb-optionalUpgrade dlm-kmp-64kbUpgrade kernel-symsUpgrade dtb-amdUpgrade kselftests-kmp-64kbUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade dtb-xilinxUpgrade dtb-allwinnerUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade kernel-source-azureUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debugUpgrade dtb-lgUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-default-vdsoUpgrade dtb-freescaleUpgrade kernel-kvmsmall-develUpgrade dtb-amazonUpgrade kernel-rt-livepatchUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-64kbUpgrade kernel-default-extraUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-azure-extraUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade dtb-apmUpgrade gfs2-kmp-rt | May 15, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-193-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-5.15.0-119-generic-64kUpgrade linux-image-gke-5.15Upgrade linux-image-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1071-azureUpgrade linux-image-5.15.0-1071-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-ibmUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-119-lowlatency-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1135-gcpUpgrade linux-image-nvidia-6.5Upgrade linux-image-5.15.0-1067-gcpUpgrade linux-image-azureUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-gkeUpgrade linux-image-5.15.0-119-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1131-awsUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-5.15.0-1061-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-119-genericUpgrade linux-image-5.15.0-1051-gkeopUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-5.4.0-1115-raspiUpgrade linux-image-5.4.0-193-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1050-xilinx-zynqmpUpgrade linux-image-5.4.0-1078-ibmUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-raspi2Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1061-raspiUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1119-kvmUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-193-genericUpgrade linux-image-intelUpgrade linux-image-azure-cvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1065-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-virtualUpgrade linux-image-intel-iotgUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1063-nvidiaUpgrade linux-image-5.15.0-119-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1065-gkeUpgrade linux-image-5.15.0-1068-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-starfiveUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-5.15.0-1066-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1063-intel-iotgUpgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-5.4.0-1136-azureUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1098-gkeopUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1091-bluefieldUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1063-nvidia-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1130-oracleUpgrade linux-image-virtual-hwe-22.04 | Jul 15, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub