In the Linux kernel, the following vulnerability has been resolved:
i40e: Do not allow untrusted VF to remove administratively set MAC
Currently when PF administratively sets VF's MAC address and the VF is put down (VF tries to delete all MACs) then the MAC is removed from MAC filters and primary VF MAC is zeroed.
Do not allow untrusted VF to remove primary MAC when it was set administratively by PF.
Reproducer: 1) Create VF 2) Set VF interface up 3) Administratively set the VF's MAC 4) Put VF interface down
[root@host ~]# echo 1 > /sys/class/net/enp2s0f0/device/sriov_numvfs [root@host ~]# ip link set enp2s0f0v0 up [root@host ~]# ip link set enp2s0f0 vf 0 mac fe:6c:b5:da:c7:7d [root@host ~]# ip link show enp2s0f0 23: enp2s0f0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000 link/ether 3c:ec:ef:b7:dd:04 brd ff:ff:ff:ff:ff:ff vf 0 link/ether fe:6c:b5:da:c7:7d brd ff:ff:ff:ff:ff:ff, spoof checking on, link-state auto, trust off [root@host ~]# ip link set enp2s0f0v0 down [root@host ~]# ip link show enp2s0f0 23: enp2s0f0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000 link/ether 3c:ec:ef:b7:dd:04 brd ff:ff:ff:ff:ff:ff vf 0 link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff, spoof checking on, link-state auto, trust off
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perf | Oct 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | Apr 17, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jan 10, 2025 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-azure-extraUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-develUpgrade kselftests-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade kernel-symsUpgrade dlm-kmp-64kbUpgrade dtb-amdUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-amazonUpgrade dtb-freescaleUpgrade kernel-rt-livepatchUpgrade dtb-socionextUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade dtb-renesasUpgrade kernel-default-livepatch-develUpgrade dtb-xilinxUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-default-develUpgrade cluster-md-kmp-rtUpgrade kernel-default-extraUpgrade dtb-armUpgrade kernel-obs-qaUpgrade reiserfs-kmp-rtUpgrade kernel-develUpgrade kernel-default-baseUpgrade kernel-default-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-develUpgrade dtb-lgUpgrade dtb-mediatekUpgrade cluster-md-kmp-defaultUpgrade kernel-debugUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-devel-rtUpgrade dtb-apmUpgrade dtb-caviumUpgrade dtb-sprdUpgrade kernel-source-vanillaUpgrade dtb-nvidiaUpgrade gfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmallUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade dtb-broadcomUpgrade kernel-source-rtUpgrade kernel-rt_debugUpgrade kernel-defaultUpgrade dtb-qcomUpgrade kernel-macrosUpgrade dtb-amlogicUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-azure-baseUpgrade gfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-marvellUpgrade kernel-sourceUpgrade dtb-exynosUpgrade kernel-azure-optionalUpgrade kernel-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-develUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-default-livepatchUpgrade kernel-debug-vdsoUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade dtb-alteraUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade kernel-azure | May 15, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1061-raspiUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-193-genericUpgrade linux-image-oracleUpgrade linux-image-intelUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-azure-cvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1078-ibmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-azure-lts-20.04Upgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-5.4.0-1119-kvmUpgrade linux-image-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-5.15.0-119-genericUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1051-gkeopUpgrade linux-image-5.4.0-1131-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1063-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1115-raspiUpgrade linux-image-5.15.0-1065-kvmUpgrade linux-image-raspi2Upgrade linux-image-6.5.0-1024-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-193-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-1061-ibmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-119-generic-lpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-awsUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-119-lowlatencyUpgrade linux-image-5.4.0-1050-xilinx-zynqmpUpgrade linux-image-oem-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-193-generic-lpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-kvmUpgrade linux-image-oem-22.04dUpgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1063-intel-iotgUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1068-awsUpgrade linux-image-starfiveUpgrade linux-image-ibmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-5.15.0-1071-azure-fdeUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-5.15.0-1071-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1136-azureUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-1098-gkeopUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1065-gkeUpgrade linux-image-5.15.0-119-generic-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-oemUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-5.15.0-1066-oracleUpgrade linux-image-5.15.0-1067-gcpUpgrade linux-image-5.15.0-119-lowlatency-64kUpgrade linux-image-5.4.0-1135-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1091-bluefieldUpgrade linux-image-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1063-nvidia-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-1130-oracleUpgrade linux-image-nvidia-6.5 | Jul 15, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub