{"id":"CVE-2026-72312","title":"octeontx2-af: fix VF bringup affecting PF promiscuous state","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-af: fix VF bringup affecting PF promiscuous state\n\nMbox handling of nix_set_rx_mode for a VF with promiscuous and\nall_multi flags set to false causes deletion…","severity":"high","cvss":7.9,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H","cvssSource":"cna","vendor":"Linux","product":"Linux","affected":["Linux >= 967db3529ecac305d230aa4e60abddf6ab63543a < daa2451640a3e0727fd598f5c2ccb8bb4d5a8b9c","Linux >= 967db3529ecac305d230aa4e60abddf6ab63543a < 212c59e5e416859579272288fd325148fc316109","Linux >= 967db3529ecac305d230aa4e60abddf6ab63543a < 53e17d9ed779ad25870abb9c31bc294c71a2278c","Linux >= 967db3529ecac305d230aa4e60abddf6ab63543a < 3de77d2f34c2bc2acaedabc2c5e0a561b85c283a","Linux >= 967db3529ecac305d230aa4e60abddf6ab63543a < 3cf83432e0561aef6d7ec2664909d12d0ff0ffc1","Linux >= 967db3529ecac305d230aa4e60abddf6ab63543a < fabb881df322da25442f98d23f5fa371e3c78ec4","Linux 5.14"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-16T18:46:27.762853Z"},"published":"2026-08-15","updated":"2026-10-16","sourceUpdated":"2026-10-16T18:55:16.851Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-72312","references":[{"url":"https://git.kernel.org/stable/c/daa2451640a3e0727fd598f5c2ccb8bb4d5a8b9c"},{"url":"https://git.kernel.org/stable/c/212c59e5e416859579272288fd325148fc316109"},{"url":"https://git.kernel.org/stable/c/53e17d9ed779ad25870abb9c31bc294c71a2278c"},{"url":"https://git.kernel.org/stable/c/3de77d2f34c2bc2acaedabc2c5e0a561b85c283a"},{"url":"https://git.kernel.org/stable/c/3cf83432e0561aef6d7ec2664909d12d0ff0ffc1"},{"url":"https://git.kernel.org/stable/c/fabb881df322da25442f98d23f5fa371e3c78ec4"}],"tags":["cve.org"],"epss":0.00154,"epssPercentile":0.04122,"ingestedAt":"2026-10-16T19:46:24.410Z","slug":"CVE-2026-72312","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-af: fix VF bringup affecting PF promiscuous state\n\nMbox handling of nix_set_rx_mode for a VF with promiscuous and\nall_multi flags set to false causes deletion of the PF's promiscuous\nand allmulti MCAM rules. This occurs because the APIs that\nenable/disable these rules operate only on the PF, even when the\nmbox request is made via a VF interface.\n\nGuard both rvu_npc_enable_allmulti_entry() and\nrvu_npc_enable_promisc_entry() disable paths with an is_vf() check so\nthat a VF bringing up or tearing down its interface cannot inadvertently\nclear the PF's MCAM rules.\n\n## Affected\n\n- `Linux >= 967db3529ecac305d230aa4e60abddf6ab63543a < daa2451640a3e0727fd598f5c2ccb8bb4d5a8b9c`\n- `Linux >= 967db3529ecac305d230aa4e60abddf6ab63543a < 212c59e5e416859579272288fd325148fc316109`\n- `Linux >= 967db3529ecac305d230aa4e60abddf6ab63543a < 53e17d9ed779ad25870abb9c31bc294c71a2278c`\n- `Linux >= 967db3529ecac305d230aa4e60abddf6ab63543a < 3de77d2f34c2bc2acaedabc2c5e0a561b85c283a`\n- `Linux >= 967db3529ecac305d230aa4e60abddf6ab63543a < 3cf83432e0561aef6d7ec2664909d12d0ff0ffc1`\n- `Linux >= 967db3529ecac305d230aa4e60abddf6ab63543a < fabb881df322da25442f98d23f5fa371e3c78ec4`\n- `Linux 5.14`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":43.5,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}