CVE-2026-72312

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the octeontx2-af driver where the Mbox handling of nix set rx mode for a Virtual Function (VF) with promiscuous and all multi flags set to false leads to the deletion of the Physical Function (PF) promiscuous and allmulti MCAM rules. This happens because the APIs used to enable or disable these rules operate exclusively on the PF, regardless of whether the request originates from a VF interface. The issue is triggered during the bring-up or tear-down of a VF interface, which can inadvertently clear the PF's MCAM rules. The fix involves adding an is vf() check to the disable paths of the rvu npc enable allmulti entry() and rvu npc enable promisc entry() functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.