In the Linux kernel, the following vulnerability has been resolved:
i40e: Do not allow untrusted VF to remove administratively set MAC
Currently when PF administratively sets VF's MAC address and the VF is put down (VF tries to delete all MACs) then the MAC is removed from MAC filters and primary VF MAC is zeroed.
Do not allow untrusted VF to remove primary MAC when it was set administratively by PF.
Reproducer: 1) Create VF 2) Set VF interface up 3) Administratively set the VF's MAC 4) Put VF interface down
[root@host ~]# echo 1 > /sys/class/net/enp2s0f0/device/sriov_numvfs [root@host ~]# ip link set enp2s0f0v0 up [root@host ~]# ip link set enp2s0f0 vf 0 mac fe:6c:b5:da:c7:7d [root@host ~]# ip link show enp2s0f0 23: enp2s0f0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000 link/ether 3c:ec:ef:b7:dd:04 brd ff:ff:ff:ff:ff:ff vf 0 link/ether fe:6c:b5:da:c7:7d brd ff:ff:ff:ff:ff:ff, spoof checking on, link-state auto, trust off [root@host ~]# ip link set enp2s0f0v0 down [root@host ~]# ip link show enp2s0f0 23: enp2s0f0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000 link/ether 3c:ec:ef:b7:dd:04 brd ff:ff:ff:ff:ff:ff vf 0 link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff, spoof checking on, link-state auto, trust off
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perf | Oct 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 8, 2024 | Apr 17, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jan 10, 2025 | Apr 17, 2024 |
| Suse | — | Upgrade dlm-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-docsUpgrade kernel-sourceUpgrade kernel-azureUpgrade dtb-marvellUpgrade dtb-caviumUpgrade dtb-amlogicUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade dtb-alteraUpgrade kernel-azure-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rtUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmallUpgrade dtb-rockchipUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-source-vanillaUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade reiserfs-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-rt_debugUpgrade dtb-broadcomUpgrade kernel-64kb-extraUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-default-manUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-syms-rtUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade kernel-azure-baseUpgrade reiserfs-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-socionextUpgrade dtb-freescaleUpgrade kernel-zfcpdumpUpgrade kernel-default-vdsoUpgrade dtb-armUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade kselftests-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-allwinnerUpgrade dtb-appleUpgrade reiserfs-kmp-rtUpgrade kernel-obs-qaUpgrade kselftests-kmp-rtUpgrade kernel-default-develUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dtb-renesasUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-source-azureUpgrade kernel-devel-rtUpgrade kernel-debugUpgrade dtb-mediatekUpgrade dtb-lgUpgrade kernel-default-extraUpgrade dtb-apmUpgrade kernel-rt-develUpgrade kernel-develUpgrade dtb-amazonUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-64kb | May 15, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gkeopUpgrade linux-image-intelUpgrade linux-image-raspi-nolpaeUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1078-ibmUpgrade linux-image-5.4.0-193-lowlatencyUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1131-awsUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-5.15.0-119-generic-lpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-virtualUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-1119-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-193-genericUpgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1065-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1115-raspiUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1051-gkeopUpgrade linux-image-5.15.0-1061-raspiUpgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1061-ibmUpgrade linux-image-5.15.0-119-genericUpgrade linux-image-raspi2Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-119-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-5.4.0-1050-xilinx-zynqmpUpgrade linux-image-5.15.0-1063-nvidiaUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-5.4.0-1098-gkeopUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1066-oracleUpgrade linux-image-oem-20.04bUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1135-gcpUpgrade linux-image-5.15.0-1071-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1063-intel-iotgUpgrade linux-image-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-kvmUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1067-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-5.15.0-1065-gkeUpgrade linux-image-5.4.0-1136-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.5.0-1027-oemUpgrade linux-image-5.15.0-1063-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-5.4.0-193-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1130-oracleUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-5.15.0-119-generic-64kUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-oemUpgrade linux-image-oem-20.04cUpgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-119-lowlatency-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-starfiveUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1068-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-5.4.0-1091-bluefieldUpgrade linux-image-generic-64kUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-5.15.0-1071-azure-fdeUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-generic-hwe-20.04 | Jul 15, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub