CVE-2026-72312 - Vulnerability Details

- octeontx2-af: fix VF bringup affecting PF promiscuous state

Description

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-af: fix VF bringup affecting PF promiscuous state

Mbox handling of nix_set_rx_mode for a VF with promiscuous and
all_multi flags set to false causes deletion of the PF's promiscuous
and allmulti MCAM rules. This occurs because the APIs that
enable/disable these rules operate only on the PF, even when the
mbox request is made via a VF interface.

Guard both rvu_npc_enable_allmulti_entry() and
rvu_npc_enable_promisc_entry() disable paths with an is_vf() check so
that a VF bringing up or tearing down its interface cannot inadvertently
clear the PF's MCAM rules.

Published: 2026-08-15

Score: 7.9 High

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

A logic error in the octeontx2-af driver of the Linux kernel allows a Virtual Function (VF) to inadvertently clear the Physical Function (PF)’s promiscuous and all‑multicast entries when the VF brings its interface up or down with both flags set to false. This results in the PF losing its normal traffic handling capabilities and can disrupt or interrupt network traffic for the host.

Affected Systems

The issue affects Linux kernel builds that include the octeontx2-af component. Any kernel containing the unpatched octeontx2-af driver is potentially vulnerable, regardless of the specific release version.

Risk and Exploitability

The CVSS score is 7.9 and the EPSS score is < 1%, indicating a high severity but a very low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. An attacker who can control VF configuration—either through local privileged access or by compromising a VM that can manipulate VF settings—could trigger the bug and cause the PF to lose its promiscuous and all‑multicast state, thereby degrading or denying network service.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`967db3529ecac305d230aa4e60abddf6ab63543a`	affected	< daa2451640a3e0727fd598f5c2ccb8bb4d5a8b9c
`967db3529ecac305d230aa4e60abddf6ab63543a`	affected	< 212c59e5e416859579272288fd325148fc316109
`967db3529ecac305d230aa4e60abddf6ab63543a`	affected	< 53e17d9ed779ad25870abb9c31bc294c71a2278c
`967db3529ecac305d230aa4e60abddf6ab63543a`	affected	< 3de77d2f34c2bc2acaedabc2c5e0a561b85c283a
`967db3529ecac305d230aa4e60abddf6ab63543a`	affected	< 3cf83432e0561aef6d7ec2664909d12d0ff0ffc1
`967db3529ecac305d230aa4e60abddf6ab63543a`	affected	< fabb881df322da25442f98d23f5fa371e3c78ec4

Linux

affected

Version	Status	Constraints
`5.14`	affected	—
`0`	unaffected	< 5.14
`6.1.178`	unaffected	≤ 6.1.*
`6.6.145`	unaffected	≤ 6.6.*
`6.12.97`	unaffected	≤ 6.12.*
`6.18.40`	unaffected	≤ 6.18.*
`7.1.5`	unaffected	≤ 7.1.*
`7.2`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[967db3529ecac305d230aa4e60abddf6ab63543a,daa2451640a3e0727fd598f5c2ccb8bb4d5a8b9c)`	affected	code_commit	—
`[967db3529ecac305d230aa4e60abddf6ab63543a,212c59e5e416859579272288fd325148fc316109)`	affected	code_commit	—
`[967db3529ecac305d230aa4e60abddf6ab63543a,3cf83432e0561aef6d7ec2664909d12d0ff0ffc1)`	affected	code_commit	—
`[967db3529ecac305d230aa4e60abddf6ab63543a,3de77d2f34c2bc2acaedabc2c5e0a561b85c283a)`	affected	code_commit	—
`[967db3529ecac305d230aa4e60abddf6ab63543a,53e17d9ed779ad25870abb9c31bc294c71a2278c)`	affected	code_commit	—
`[967db3529ecac305d230aa4e60abddf6ab63543a,fabb881df322da25442f98d23f5fa371e3c78ec4)`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`5.14`	affected	generic	—
`[0,5.14)`	unaffected	semver	—
`[6.1.178,6.2.0)`	unaffected	semver	—
`[6.6.145,6.7.0)`	unaffected	semver	—
`[6.12.97,6.13.0)`	unaffected	semver	—
`[6.18.40,6.19.0)`	unaffected	semver	—
`[7.1.5,7.2.0)`	unaffected	semver	—
`[7.2-rc3,*]`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

Update the Linux kernel to a version containing the octeontx2-af commit that adds the is_vf() guard, or apply that commit directly to the kernel source.
Reboot the system or reload the octeontx2 module so the updated code is active.
Verify that bringing a VF up or down does not clear the PF’s promiscuous and all‑multicast rules; monitor PF interface state after VF reconfiguration.
If immediate patching is not possible, restrict privileges that allow VF configuration changes to trusted administrators only.

Generated by OpenCVE AI on August 22, 2026 at 08:41 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00154.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/212c59e5e416859579272288fd325148fc316109
https://git.kernel.org/stable/c/3cf83432e0561aef6d7ec2664909d12d0ff0ffc1
https://git.kernel.org/stable/c/3de77d2f34c2bc2acaedabc2c5e0a561b85c283a
https://git.kernel.org/stable/c/53e17d9ed779ad25870abb9c31bc294c71a2278c
https://git.kernel.org/stable/c/daa2451640a3e0727fd598f5c2ccb8bb4d5a8b9c
https://git.kernel.org/stable/c/fabb881df322da25442f98d23f5fa371e3c78ec4
https://lore.kernel.org/linux-cve-announce/2026081504-CVE-2026-72312-a68f@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2026-72312
https://www.cve.org/CVERecord?id=CVE-2026-72312

History

Sat, 22 Aug 2026 07:30:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-284 CWE-640

Wed, 19 Aug 2026 00:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-266
References		https://lore.kernel.org/linux-cve-announce/2026081504-CVE-2026-72312-a68f@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-72312 https://www.cve.org/CVERecord?id=CVE-2026-72312
Metrics	threat_severity `None`	threat_severity `Moderate`

Mon, 17 Aug 2026 06:00:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 7.9, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H'}`

Sat, 15 Aug 2026 19:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-284 CWE-640

Sat, 15 Aug 2026 06:00:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix VF bringup affecting PF promiscuous state Mbox handling of nix_set_rx_mode for a VF with promiscuous and all_multi flags set to false causes deletion of the PF's promiscuous and allmulti MCAM rules. This occurs because the APIs that enable/disable these rules operate only on the PF, even when the mbox request is made via a VF interface. Guard both rvu_npc_enable_allmulti_entry() and rvu_npc_enable_promisc_entry() disable paths with an is_vf() check so that a VF bringing up or tearing down its interface cannot inadvertently clear the PF's MCAM rules.
Title		octeontx2-af: fix VF bringup affecting PF promiscuous state
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/212c59e5e416859579272288fd325148fc316109 https://git.kernel.org/stable/c/3cf83432e0561aef6d7ec2664909d12d0ff0ffc1 https://git.kernel.org/stable/c/3de77d2f34c2bc2acaedabc2c5e0a561b85c283a https://git.kernel.org/stable/c/53e17d9ed779ad25870abb9c31bc294c71a2278c https://git.kernel.org/stable/c/daa2451640a3e0727fd598f5c2ccb8bb4d5a8b9c https://git.kernel.org/stable/c/fabb881df322da25442f98d23f5fa371e3c78ec4

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-15T05:55:27.817Z

Updated: 2026-08-17T05:42:39.727Z

Reserved: 2026-08-09T03:40:39.918Z

Link: CVE-2026-72312

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-15T06:22:04.013

Modified: 2026-08-17T06:18:34.310

Link: CVE-2026-72312

Redhat

Severity : Moderate

Publid Date: 2026-08-15T00:00:00Z

Links: CVE-2026-72312 - Bugzilla

OpenCVE Enrichment

Updated: 2026-08-22T08:45:03Z

Weaknesses

CWE-266
Incorrect Privilege Assignment

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object