CVE-2024-26830: i40e: Do not allow untrusted VF to remove administratively set MAC
i40e: Do not allow untrusted VF to remove administratively set MAC
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.1.79 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.6.18 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.7.6 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.8 - Upgrade
Upgrade
linux kernel/i40eto a version that resolves this vulnerability.Patch CVE-2024-26830
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26830?
CVE-2024-26830 is considered a medium severity vulnerability due to its potential to allow untrusted virtual functions to remove administratively set MAC addresses.
How do I fix CVE-2024-26830?
To mitigate CVE-2024-26830, update to the fixed kernel versions 6.1.79, 6.6.18, 6.7.6, 6.8 for Red Hat or ensure your Debian system uses versions 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
What systems are affected by CVE-2024-26830?
CVE-2024-26830 affects Linux kernel versions up to 6.1.79, 6.6.18, 6.7.6, 6.8 for Red Hat and versions up to 5.10.223-1 and 5.10.226-1 for Debian.
Is CVE-2024-26830 being actively exploited?
As of now, there is no public indication that CVE-2024-26830 is being actively exploited in the wild.
What impact does CVE-2024-26830 have on system security?
CVE-2024-26830 could lead to unauthorized MAC address changes, potentially impacting network security and traffic management.