diff options
| author | Manish Chopra <manishc@marvell.com> | 2022-03-02 02:52:22 -0800 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2022-04-15 14:14:40 +0200 |
| commit | 717375c2077e0943a7babab682e7d91eaf0b435d (patch) | |
| tree | decd65c2f5f5afbe4bf87a78acddd1ee8a5ba11c /include/ras | |
| parent | 7265c375beea22477044bd26864472af7f205805 (diff) | |
| download | linux-stable-717375c2077e0943a7babab682e7d91eaf0b435d.tar.gz linux-stable-717375c2077e0943a7babab682e7d91eaf0b435d.tar.bz2 linux-stable-717375c2077e0943a7babab682e7d91eaf0b435d.zip | |
qed: validate and restrict untrusted VFs vlan promisc mode
commit cbcc44db2cf7b836896733acc0e5ea966136ed22 upstream.
Today when VFs are put in promiscuous mode, they can request PF
to configure device for them to receive all VLANs traffic regardless
of what vlan is configured by the PF (via ip link) and PF allows this
config request regardless of whether VF is trusted or not.
From security POV, when VLAN is configured for VF through PF (via ip link),
honour such config requests from VF only when they are configured to be
trusted, otherwise restrict such VFs vlan promisc mode config.
Cc: stable@vger.kernel.org
Fixes: f990c82c385b ("qed*: Add support for ndo_set_vf_trust")
Signed-off-by: Manish Chopra <manishc@marvell.com>
Signed-off-by: Ariel Elior <aelior@marvell.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'include/ras')
0 files changed, 0 insertions, 0 deletions