Description
On multiple SR-IOV cars it is possible for VF's assigned to guests to send ethernet flow control pause frames via the PF. This includes Linux kernel ixgbe driver before commit f079fa005aae08ee0e1bc32699874ff4f02e11c1, the Linux Kernel i40e/i40evf driver before e7358f54a3954df16d4f87e3cad35063f1c17de5 and the DPDK before commit 3f12b9f23b6499ff66ec8b0de941fb469297e5d0, additionally Multiple vendor NIC firmware is affected.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP3 | kernel-firmware | 20170530-21.19.1 | SUSE-SU-2018:0674-1 |
| SLES 12 SP2 | kernel-firmware | 20170530-21.19.1 | SUSE-SU-2018:0674-1 |
| SLES 12 SP1 | kernel-firmware | 20160516git-10.13.1 | SUSE-SU-2018:1570-1 |
| SLES 12 SP1 | kernel-xen +3 | 3.12.74-60.64.82.1 | SUSE-SU-2018:0525-1 |
| SLES 12 SP1 | kgraft-patch-SLE12-SP1_Update_25 | 1-2.9.1 | SUSE-SU-2018:0525-1 |
| SLES 12 | kernel-ec2 +4 | 3.12.61-52.119.1 | SUSE-SU-2018:0525-1, SUSE-SU-2018:0437-1 |
| SLES 12 | kernel-firmware | 20140807git-5.8.1 | SUSE-SU-2018:1567-1 |
| SLES 12 | kgraft-patch-SLE12_Update_31 | 1-1.7.1 | SUSE-SU-2018:0437-1 |
| SLES 11 SP4 | cluster-network | 1.4-2.32.4.6 | SUSE-SU-2018:0555-1 |
| SLES 11 SP4 | drbd | 8.4.4-0.27.4.2 | SUSE-SU-2018:0555-1 |
| SLES 11 SP4 | drbd-kmp | 8.4.4-0.27.4.6 | SUSE-SU-2018:0555-1 |
| SLES 11 SP4 | gfs2 | 2-0.24.4.6 | SUSE-SU-2018:0555-1 |
| SLES 11 SP4 | kernel-ec2 +9 | 3.0.101-108.35.1 | SUSE-SU-2018:0555-1 |
| SLES 11 SP4 | kernel-firmware | 20110923-0.59.3.1 | SUSE-SU-2018:0671-1 |
| SLES 11 SP4 | ocfs2 | 1.6-0.28.5.6 | SUSE-SU-2018:0555-1 |
Show 6 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP3 | kernel-firmware | 20170530-21.19.1 | SUSE-SU-2018:0674-1 |
| SLES for SAP 12 SP2 | kernel-firmware | 20170530-21.19.1 | SUSE-SU-2018:0674-1 |
| SLES for SAP 12 SP1 | kernel-firmware | 20160516git-10.13.1 | SUSE-SU-2018:1570-1 |
| SLES for SAP 12 SP1 | kernel-xen +3 | 3.12.74-60.64.82.1 | SUSE-SU-2018:0525-1 |
| SLES for SAP 12 SP1 | kgraft-patch-SLE12-SP1_Update_25 | 1-2.9.1 | SUSE-SU-2018:0525-1 |
| SLES for SAP 11 SP4 | kernel-ec2 +8 | 3.0.101-108.35.1 | SUSE-SU-2018:0555-1 |
| SLES for SAP 11 SP4 | kernel-firmware | 20110923-0.59.3.1 | SUSE-SU-2018:0671-1 |
| SLE Real Time 11 SP4 | cluster-network | 1.4-2.32.4.6 | SUSE-SU-2018:0555-1 |
| SLE Real Time 11 SP4 | drbd-kmp | 8.4.4-0.27.4.6 | SUSE-SU-2018:0555-1 |
| SLE Real Time 11 SP4 | gfs2 | 2-0.24.4.6 | SUSE-SU-2018:0555-1 |
| SLE Real Time 11 SP4 | kernel-rt +3 | 3.0.101.rt130-69.21.1 | SUSE-SU-2018:0841-1 |
| SLE Real Time 11 SP4 | ocfs2 | 1.6-0.28.5.6 | SUSE-SU-2018:0555-1 |
| SUSE OpenStack Cloud 6 | kernel-xen +3 | 3.12.74-60.64.82.1 | SUSE-SU-2018:0525-1 |
| SUSE OpenStack Cloud 6 | kgraft-patch-SLE12-SP1_Update_25 | 1-2.9.1 | SUSE-SU-2018:0525-1 |
Advisories 8
- SUSE-SU-2018:1567-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:0674-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:1570-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:0555-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:0841-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:0671-1 Security update for kernel-firmware SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:0525-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:0437-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026