net/liquidio: drop cached VF pci_dev LUT (Linux Linux)

CVE-2026-72329
CRITICAL 9.3

En bref

Source
NVD
EPSS
EPSS 0.19 % · centile 9 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
Linux
Statut NVD
Received

Description

In the Linux kernel, the following vulnerability has been resolved: net/liquidio: drop cached VF pci_dev LUT The PF SR-IOV enable path caches VF pci_dev pointers in dpiring_to_vfpcidev_lut[] by iterating with pci_get_device(). Those entries do not own a reference, because the iterator drops the previous device reference on each step. The cached pointer is then dereferenced later when handling OCTEON_VF_FLR_REQUEST. Replace the cached VF mapping with runtime lookup on the mailbox DPI ring: derive the VF index from q_no, resolve the VF via exported PCI IOV helpers, validate it with the PF pointer and VF ID, then issue pcie_flr() and drop the reference with pci_dev_put(). Remove the unused VF lookup table initialization and cleanup.

Références

Scores

VersionScoreVecteurÉvalué par
CVSS 3.1CRITICAL 9.3CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HLinux
CVSS 3.1CRITICAL 9.3CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HNVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary)

Références européennes

Avis du CERT-FR

Produits affectés

ProduitVersions
Linux · Linuxaffected ca6139ffc67ee6ef0459f81e37894ed411083855 < 4ec87796fadf5a631ee6513c258c0e3d9ca62f79 ; affected ca6139ffc67ee6ef0459f81e37894ed411083855 < e3b20de8d7c06c8f1a0ded1e52be9d282609c3da ; affected ca6139ffc67ee6ef0459f81e37894ed411083855 < 1cf5c6a80adc31456f3e93b2922a2446fd63e2c4 ; affected ca6139ffc67ee6ef0459f81e37894ed411083855 < 08ff33dce6f91510bb296a753a232db0ca3fd3d8 ; affected ca6139ffc67ee6ef0459f81e37894ed411083855 < 81acef3a247fd523513a2e9f71de1c167bc0f882 ; affected ca6139ffc67ee6ef0459f81e37894ed411083855 < 5c0e3ba4f500fd4314ceb42f07f16bc445156431
Linux · Linuxaffected 4.10 ; unaffected 0 < 4.10 ; unaffected 6.1.191 ≤ 6.1.* ; unaffected 6.6.160 ≤ 6.6.* ; unaffected 6.12.114 ≤ 6.12.* ; unaffected 6.18.57 ≤ 6.18.*

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD