linux

iv/linux

History

Manish Chopra cbcc44db2c qed: validate and restrict untrusted VFs vlan promisc mode

Today when VFs are put in promiscuous mode, they can request PF
to configure device for them to receive all VLANs traffic regardless
of what vlan is configured by the PF (via ip link) and PF allows this
config request regardless of whether VF is trusted or not.

From security POV, when VLAN is configured for VF through PF (via ip link),
honour such config requests from VF only when they are configured to be
trusted, otherwise restrict such VFs vlan promisc mode config.

Cc: stable@vger.kernel.org
Fixes: f990c82c385b ("qed*: Add support for ndo_set_vf_trust")
Signed-off-by: Manish Chopra <manishc@marvell.com>
Signed-off-by: Ariel Elior <aelior@marvell.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2022-03-03 10:26:20 +00:00

netxen

ethtool: extend ringparam setting/getting API with rx_buf_len

2021-11-22 12:31:49 +00:00

qed

qed: validate and restrict untrusted VFs vlan promisc mode

2022-03-03 10:26:20 +00:00

qede

Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next

2021-12-31 14:35:40 +00:00

qlcnic

net: qlcnic: use time_is_before_jiffies() instead of open coding it