Security tracker / CVE-2024-26830

CVE-2024-26830

i40e: Do not allow untrusted VF to remove administratively set MAC

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in 700bbf6c1f9e ("i40e: allow VF to remove any MAC filter")
 carnil> ceb29474bbbc ("i40e: Add support for VF to specify its primary MAC address").
 carnil> Vulnerable versions: 3.14-rc1.

Bugs

Status

Branch	Status
upstream	released (6.8-rc5) [73d9629e1c8c1982f13688c4d1019c3994647ccc]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.12-upstream-stable	N/A "Fixed before branching point"
6.8-upstream-stable	N/A "Fixed before branching point"
6.7-upstream-stable	released (6.7.6) [d250a81ba813a93563be68072c563aa1e346346d]
6.6-upstream-stable	released (6.6.18) [be147926140ac48022c9605d7ab0a67387e4b404]
6.1-upstream-stable	released (6.1.79) [1c981792e4ccbc134b468797acdd7781959e6893]
5.10-upstream-stable	needed
sid	released (6.7.7-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	released (6.1.82-1)
5.10-bullseye-security	needed