---
id: CVE-2026-72312
title: 'octeontx2-af: fix VF bringup affecting PF promiscuous state'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  octeontx2-af: fix VF bringup affecting PF promiscuous state

  Mbox handling of nix_set_rx_mode for a VF with promiscuous and
  all_multi flags set to false causes deletion…
severity: high
cvss: 7.9
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 967db3529ecac305d230aa4e60abddf6ab63543a <
    daa2451640a3e0727fd598f5c2ccb8bb4d5a8b9c
  - >-
    Linux >= 967db3529ecac305d230aa4e60abddf6ab63543a <
    212c59e5e416859579272288fd325148fc316109
  - >-
    Linux >= 967db3529ecac305d230aa4e60abddf6ab63543a <
    53e17d9ed779ad25870abb9c31bc294c71a2278c
  - >-
    Linux >= 967db3529ecac305d230aa4e60abddf6ab63543a <
    3de77d2f34c2bc2acaedabc2c5e0a561b85c283a
  - >-
    Linux >= 967db3529ecac305d230aa4e60abddf6ab63543a <
    3cf83432e0561aef6d7ec2664909d12d0ff0ffc1
  - >-
    Linux >= 967db3529ecac305d230aa4e60abddf6ab63543a <
    fabb881df322da25442f98d23f5fa371e3c78ec4
  - Linux 5.14
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-16T18:46:27.762853Z'
published: '2026-08-15'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T18:55:16.851Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-72312'
references:
  - url: 'https://git.kernel.org/stable/c/daa2451640a3e0727fd598f5c2ccb8bb4d5a8b9c'
  - url: 'https://git.kernel.org/stable/c/212c59e5e416859579272288fd325148fc316109'
  - url: 'https://git.kernel.org/stable/c/53e17d9ed779ad25870abb9c31bc294c71a2278c'
  - url: 'https://git.kernel.org/stable/c/3de77d2f34c2bc2acaedabc2c5e0a561b85c283a'
  - url: 'https://git.kernel.org/stable/c/3cf83432e0561aef6d7ec2664909d12d0ff0ffc1'
  - url: 'https://git.kernel.org/stable/c/fabb881df322da25442f98d23f5fa371e3c78ec4'
tags:
  - cve.org
epss: 0.00154
epssPercentile: 0.04122
ingestedAt: '2026-10-16T19:46:24.410Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-af: fix VF bringup affecting PF promiscuous state

Mbox handling of nix_set_rx_mode for a VF with promiscuous and
all_multi flags set to false causes deletion of the PF's promiscuous
and allmulti MCAM rules. This occurs because the APIs that
enable/disable these rules operate only on the PF, even when the
mbox request is made via a VF interface.

Guard both rvu_npc_enable_allmulti_entry() and
rvu_npc_enable_promisc_entry() disable paths with an is_vf() check so
that a VF bringing up or tearing down its interface cannot inadvertently
clear the PF's MCAM rules.

## Affected

- `Linux >= 967db3529ecac305d230aa4e60abddf6ab63543a < daa2451640a3e0727fd598f5c2ccb8bb4d5a8b9c`
- `Linux >= 967db3529ecac305d230aa4e60abddf6ab63543a < 212c59e5e416859579272288fd325148fc316109`
- `Linux >= 967db3529ecac305d230aa4e60abddf6ab63543a < 53e17d9ed779ad25870abb9c31bc294c71a2278c`
- `Linux >= 967db3529ecac305d230aa4e60abddf6ab63543a < 3de77d2f34c2bc2acaedabc2c5e0a561b85c283a`
- `Linux >= 967db3529ecac305d230aa4e60abddf6ab63543a < 3cf83432e0561aef6d7ec2664909d12d0ff0ffc1`
- `Linux >= 967db3529ecac305d230aa4e60abddf6ab63543a < fabb881df322da25442f98d23f5fa371e3c78ec4`
- `Linux 5.14`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.