The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
i40e: Do not allow untrusted VF to remove administratively set MAC
Currently when PF administratively sets VF's MAC address and the VF is put down (VF tries to delete all MACs) then the MAC is removed from MAC filters and primary VF MAC is zeroed.
Do not allow untrusted VF to remove primary MAC when it was set administratively by PF.
Reproducer: 1) Create VF 2) Set VF interface up 3) Administratively set the VF's MAC 4) Put VF interface down
[root@host ~]# echo 1 > /sys/class/net/enp2s0f0/device/sriov_numvfs [root@host ~]# ip link set enp2s0f0v0 up [root@host ~]# ip link set enp2s0f0 vf 0 mac fe:6c:b5:da:c7:7d [root@host ~]# ip link show enp2s0f0 23: enp2s0f0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000 link/ether 3c:ec:ef:b7:dd:04 brd ff:ff:ff:ff:ff:ff vf 0 link/ether fe:6c:b5:da:c7:7d brd ff:ff:ff:ff:ff:ff, spoof checking on, link-state auto, trust off [root@host ~]# ip link set enp2s0f0v0 down [root@host ~]# ip link show enp2s0f0 23: enp2s0f0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000 link/ether 3c:ec:ef:b7:dd:04 brd ff:ff:ff:ff:ff:ff vf 0 link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff, spoof checking on, link-state auto, trust off
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftool | Oct 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Oct 8, 2024 | Apr 17, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jan 10, 2025 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-rtUpgrade kernel-rt-vdsoUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade dtb-qcomUpgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade kernel-rt_debugUpgrade kernel-default-livepatchUpgrade dtb-rockchipUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-default-manUpgrade kernel-syms-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade kernel-azure-baseUpgrade dtb-amlogicUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade kernel-azure-develUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmallUpgrade dlm-kmp-rtUpgrade kernel-syms-azureUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade kernel-azure-optionalUpgrade dtb-exynosUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade reiserfs-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade dtb-alteraUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade kernel-kvmsmall-develUpgrade kernel-default-optionalUpgrade kernel-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-debugUpgrade dtb-mediatekUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade dtb-armUpgrade kernel-zfcpdumpUpgrade kernel-default-vdsoUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-obs-qaUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade kernel-develUpgrade dtb-apmUpgrade kernel-default-extraUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade kernel-default-livepatch-develUpgrade dtb-socionextUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade kernel-rt-livepatch | May 15, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-5.15.0-119-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-5.4.0-1098-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1071-azureUpgrade linux-image-5.15.0-1071-azure-fdeUpgrade linux-image-5.15.0-1063-intel-iotgUpgrade linux-image-ibmUpgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-5.15.0-1065-gkeUpgrade linux-image-5.4.0-1135-gcpUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1066-oracleUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1091-bluefieldUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-5.4.0-193-generic-lpaeUpgrade linux-image-5.4.0-1130-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1067-gcpUpgrade linux-image-5.4.0-1136-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-oemUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1068-awsUpgrade linux-image-nvidia-6.5Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-starfiveUpgrade linux-image-oem-22.04Upgrade linux-image-kvmUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1063-nvidia-lowlatencyUpgrade linux-image-5.15.0-119-lowlatency-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-5.15.0-1061-raspiUpgrade linux-image-azure-cvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-119-genericUpgrade linux-image-5.15.0-1051-gkeopUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1065-kvmUpgrade linux-image-5.4.0-1119-kvmUpgrade linux-image-virtualUpgrade linux-image-5.4.0-193-genericUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1061-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1131-awsUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-193-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.4.0-1115-raspiUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-oracleUpgrade linux-image-bluefieldUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.5.0-1024-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.4.0-1078-ibmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-119-lowlatencyUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-awsUpgrade linux-image-5.4.0-1050-xilinx-zynqmpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-5.15.0-1063-nvidiaUpgrade linux-image-intelUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-119-generic-lpae | Jul 15, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 17, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub