CVE-2026-72312octeontx2-af: fix VF bringup affecting PF promiscuous state
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix VF bringup affecting PF promiscuous state Mbox handling of nix_set_rx_mode for a VF with promiscuous and all_multi flags set to false causes deletion of the PF's promiscuous and allmulti MCAM rules. This occurs because the APIs that enable/disable these rules operate only on the PF, even when the mbox request is made via a VF interface. Guard both rvu_npc_enable_allmulti_entry() and rvu_npc_enable_promisc_entry() disable paths with an is_vf() check so that a VF bringing up or tearing down its interface cannot inadvertently clear the PF's MCAM rules.
- CVSS
- 7.9 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 967db3529ecac305d230aa4e60abddf6ab63543a before daa2451640a3e0727fd598f5c2ccb8bb4d5a8b9c; 967db3529ecac305d230aa4e60abddf6ab63543a builds before 212c59e5e416859579272288fd325148fc316109; 967db3529ecac305d230aa4e60abddf6ab63543a builds before 53e17d9ed779ad25870abb9c31bc294c71a2278c; 967db3529ecac305d230aa4e60abddf6ab63543a builds before 3de77d2f34c2bc2acaedabc2c5e0a561b85c283a; 967db3529ecac305d230aa4e60abddf6ab63543a builds before 3cf83432e0561aef6d7ec2664909d12d0ff0ffc1; from 967db3529ecac305d230aa4e60abddf6ab63543a before fabb881df322da25442f98d23f5fa371e3c78ec4 | CNA record |
References
- https://git.kernel.org/stable/c/daa2451640a3e0727fd598f5c2ccb8bb4d5a8b9c
- https://git.kernel.org/stable/c/212c59e5e416859579272288fd325148fc316109
- https://git.kernel.org/stable/c/53e17d9ed779ad25870abb9c31bc294c71a2278c
- https://git.kernel.org/stable/c/3de77d2f34c2bc2acaedabc2c5e0a561b85c283a
- https://git.kernel.org/stable/c/3cf83432e0561aef6d7ec2664909d12d0ff0ffc1
- https://git.kernel.org/stable/c/fabb881df322da25442f98d23f5fa371e3c78ec4
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.