{"id":"CVE-2026-72312","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-af: fix VF bringup affecting PF promiscuous state\n\nMbox handling of nix_set_rx_mode for a VF with promiscuous and\nall_multi flags set to false causes deletion…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-af: fix VF bringup affecting PF promiscuous state\n\nMbox handling of nix_set_rx_mode for a VF with promiscuous and\nall_multi flags set to false causes deletion…","severity":"high","cvss":7.9,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H","vendor":"Linux","product":"Linux","affected":["Linux >= 967db3529ecac305d230aa4e60abddf6ab63543a < daa2451640a3e0727fd598f5c2ccb8bb4d5a8b9c","Linux >= 967db3529ecac305d230aa4e60abddf6ab63543a < 212c59e5e416859579272288fd325148fc316109","Linux >= 967db3529ecac305d230aa4e60abddf6ab63543a < 53e17d9ed779ad25870abb9c31bc294c71a2278c","Linux >= 967db3529ecac305d230aa4e60abddf6ab63543a < 3de77d2f34c2bc2acaedabc2c5e0a561b85c283a","Linux >= 967db3529ecac305d230aa4e60abddf6ab63543a < 3cf83432e0561aef6d7ec2664909d12d0ff0ffc1","Linux >= 967db3529ecac305d230aa4e60abddf6ab63543a < fabb881df322da25442f98d23f5fa371e3c78ec4","Linux 5.14"],"published":"2026-08-15","updated":"2026-10-16","sourceUpdated":"2026-10-16T19:17:21.767","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-72312","references":[{"url":"https://git.kernel.org/stable/c/212c59e5e416859579272288fd325148fc316109","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/3cf83432e0561aef6d7ec2664909d12d0ff0ffc1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/3de77d2f34c2bc2acaedabc2c5e0a561b85c283a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/53e17d9ed779ad25870abb9c31bc294c71a2278c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/daa2451640a3e0727fd598f5c2ccb8bb4d5a8b9c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/fabb881df322da25442f98d23f5fa371e3c78ec4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"epss":0.00154,"epssPercentile":0.04488,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-16T18:46:27.762853Z"},"ingestedAt":"2026-10-16T19:46:24.410Z","slug":"CVE-2026-72312","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-af: fix VF bringup affecting PF promiscuous state\n\nMbox handling of nix_set_rx_mode for a VF with promiscuous and\nall_multi flags set to false causes deletion of the PF's promiscuous\nand allmulti MCAM rules. This occurs because the APIs that\nenable/disable these rules operate only on the PF, even when the\nmbox request is made via a VF interface.\n\nGuard both rvu_npc_enable_allmulti_entry() and\nrvu_npc_enable_promisc_entry() disable paths with an is_vf() check so\nthat a VF bringing up or tearing down its interface cannot inadvertently\nclear the PF's MCAM rules.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":43.5,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}