High 7.9Published Aug 15, 2026

CVE-2026-72312octeontx2-af: fix VF bringup affecting PF promiscuous state

Updated under an hour ago (Oct 28, 2026, 4:00 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix VF bringup affecting PF promiscuous state Mbox handling of nix_set_rx_mode for a VF with promiscuous and all_multi flags set to false causes deletion of the PF's promiscuous and allmulti MCAM rules. This occurs because the APIs that enable/disable these rules operate only on the PF, even when the mbox request is made via a VF interface. Guard both rvu_npc_enable_allmulti_entry() and rvu_npc_enable_promisc_entry() disable paths with an is_vf() check so that a VF bringing up or tearing down its interface cannot inadvertently clear the PF's MCAM rules.

CVSS: 7.9 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 16, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 967db3529ecac305d230aa4e60abddf6ab63543a before daa2451640a3e0727fd598f5c2ccb8bb4d5a8b9c; 967db3529ecac305d230aa4e60abddf6ab63543a builds before 212c59e5e416859579272288fd325148fc316109; 967db3529ecac305d230aa4e60abddf6ab63543a builds before 53e17d9ed779ad25870abb9c31bc294c71a2278c; 967db3529ecac305d230aa4e60abddf6ab63543a builds before 3de77d2f34c2bc2acaedabc2c5e0a561b85c283a; 967db3529ecac305d230aa4e60abddf6ab63543a builds before 3cf83432e0561aef6d7ec2664909d12d0ff0ffc1; from 967db3529ecac305d230aa4e60abddf6ab63543a before fabb881df322da25442f98d23f5fa371e3c78ec4	CNA record

References

References

https://git.kernel.org/stable/c/daa2451640a3e0727fd598f5c2ccb8bb4d5a8b9c
https://git.kernel.org/stable/c/212c59e5e416859579272288fd325148fc316109
https://git.kernel.org/stable/c/53e17d9ed779ad25870abb9c31bc294c71a2278c
https://git.kernel.org/stable/c/3de77d2f34c2bc2acaedabc2c5e0a561b85c283a
https://git.kernel.org/stable/c/3cf83432e0561aef6d7ec2664909d12d0ff0ffc1
https://git.kernel.org/stable/c/fabb881df322da25442f98d23f5fa371e3c78ec4

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.