Intel ice driver VF resource exhaustion fix via FDIR filter limit

From this webpage screenshot, we can extract the following key information about the vulnerability: 1. Vulnerability Description: - Title: ice: Add a per-VF limit on number of FDIR filters - Description: In the file , a limit on the number of FDIR filters per VF has been added. This is because the iavf driver imposes a software limit (128) on the number of FDIR filters a VF can request, but a malicious VF driver might request more, potentially exhausting resources available to other VFs. 2. Fix Measures: - Code Change: A new macro definition with a value of 128 has been added in . - Logic Change: In , a check has been implemented to return an error if a VF requests more FDIR filters than . 3. Context Information: - Author: Ahmed Zaki - Commit Time: 2024-06-14 07:18:42 -0600 - Committer: Greg Kroah-Hartman - Parent Commit: c964429ef53f42098a6545a5dabebe1441c1e81d - Download Link: linux-e81b674ead8e2172b2a69e7b45e079239ace4dcb.tar.gz 4. Patch Status: - Patch Status: Merged into upstream. 5. Patch Content: - File Changes: New macro definition and logic check added in . - Code Changes: New macro definition and logic check added in . This information indicates that the vulnerability fix addresses the issue where a malicious VF driver could request an excessive number of FDIR filters, leading to resource exhaustion for other VFs. The fix implements a per-VF limit by adding a new macro and validation logic in .

Goal Reached Thanks to every supporter — we hit 100%!

Intel ice driver VF resource exhaustion fix via FDIR filter limit