Lucene search

LinuxVULNRICHMENT:CVE-2024-42291

HistoryAug 17, 2024 - 9:09 a.m.

CVE-2024-42291 ice: Add a per-VF limit on number of FDIR filters

2024-08-1709:09:00

Linux

github.com

linux kernel

vulnerability

fdir filters

ice driver

vf limit

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

In the Linux kernel, the following vulnerability has been resolved:

ice: Add a per-VF limit on number of FDIR filters

While the iavf driver adds a s/w limit (128) on the number of FDIR
filters that the VF can request, a malicious VF driver can request more
than that and exhaust the resources for other VFs.

Add a similar limit in ice.

References

git.kernel.org/stable/c/292081c4e7f575a79017d5cbe1a0ec042783976f

git.kernel.org/stable/c/6ebbe97a488179f5dc85f2f1e0c89b486e99ee97

git.kernel.org/stable/c/8e02cd98a6e24389d476e28436d41e620ed8e559

git.kernel.org/stable/c/d62389073a5b937413e2d1bc1da06ccff5103c0c