CVE-2024-42291

ice: Add a per-VF limit on number of FDIR filters

State: Published
Severity: Not scored
Published: Aug 17, 2024
Updated: May 11, 2026
Reserved: Jul 30, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ice: Add a per-VF limit on number of FDIR filters

While the iavf driver adds a s/w limit (128) on the number of FDIR filters that the VF can request, a malicious VF driver can request more than that and exhaust the resources for other VFs.

Add a similar limit in ice.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1f7ea1cd6a3748427512ccc9582e18cd9efea966 to before e81b674ead8e2172b2a69e7b45e079239ace4dbcAffected 1f7ea1cd6a3748427512ccc9582e18cd9efea966 to before 8e02cd98a6e24389d476e28436d41e620ed8e559Affected 1f7ea1cd6a3748427512ccc9582e18cd9efea966 to before d62389073a5b937413e2d1bc1da06ccff5103c0cAffected 1f7ea1cd6a3748427512ccc9582e18cd9efea966 to before 292081c4e7f575a79017d5cbe1a0ec042783976fAffected 1f7ea1cd6a3748427512ccc9582e18cd9efea966 to before 6ebbe97a488179f5dc85f2f1e0c89b486e99ee97Affected
LinuxLinux	5.13Affected before 5.13Not affected 5.15.172 through 5.15.Not affected 6.1.103 through 6.1.Not affected 6.6.44 through 6.6.Not affected 6.10.3 through 6.10.Not affected 6.11 and laterNot affected

Product

Versions

LinuxLinux

1f7ea1cd6a3748427512ccc9582e18cd9efea966 to before e81b674ead8e2172b2a69e7b45e079239ace4dbcAffected
1f7ea1cd6a3748427512ccc9582e18cd9efea966 to before 8e02cd98a6e24389d476e28436d41e620ed8e559Affected
1f7ea1cd6a3748427512ccc9582e18cd9efea966 to before d62389073a5b937413e2d1bc1da06ccff5103c0cAffected
1f7ea1cd6a3748427512ccc9582e18cd9efea966 to before 292081c4e7f575a79017d5cbe1a0ec042783976fAffected
1f7ea1cd6a3748427512ccc9582e18cd9efea966 to before 6ebbe97a488179f5dc85f2f1e0c89b486e99ee97Affected

LinuxLinux

5.13Affected
before 5.13Not affected
5.15.172 through 5.15.*Not affected
6.1.103 through 6.1.*Not affected
6.6.44 through 6.6.*Not affected
6.10.3 through 6.10.*Not affected
6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.