diff options
Diffstat (limited to 'share/security/advisories/FreeBSD-EN-15:14.ixgbe.asc')
| -rw-r--r-- | share/security/advisories/FreeBSD-EN-15:14.ixgbe.asc | 121 |
1 files changed, 121 insertions, 0 deletions
diff --git a/share/security/advisories/FreeBSD-EN-15:14.ixgbe.asc b/share/security/advisories/FreeBSD-EN-15:14.ixgbe.asc new file mode 100644 index 0000000000..5b2f3b4ce8 --- /dev/null +++ b/share/security/advisories/FreeBSD-EN-15:14.ixgbe.asc @@ -0,0 +1,121 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA512 + +============================================================================= +FreeBSD-EN-15:14.ixgbe Errata Notice + The FreeBSD Project + +Topic: Disable ixgbe(4) flow-director support + +Category: core +Module: ixgbe +Announced: 2015-08-25 +Credits: Marc De La Gueronniere (Verisign, Inc.) +Affects: FreeBSD 10.1 +Corrected: 2014-10-11 22:10:39 UTC (stable/10, 10.1-STABLE) + 2015-08-25 20:48:58 UTC (releng/10.1, 10.1-RELEASE-p19) + +For general information regarding FreeBSD Errata Notices and Security +Advisories, including descriptions of the fields above, security +branches, and the following sections, please visit +<URL:https://security.freebsd.org/>. + +I. Background + +Flow director is an Intel technology to steer incoming packets in application +aware fashion. + +II. Problem Description + +Flow director support is not completely/correctly implemented in FreeBSD at +this time. + +III. Impact + +Enabling flow director support may cause traffic to land on a wrong RX queue +of the NIC, resulting in bad or sub-optimal performance on the receive side. + +IV. Workaround + +No workaround is available, but systems that do not have Intel(R) 82559 +series 10Gb Ethernet Controllers are not affected. + +V. Solution + +Perform one of the following: + +1) Upgrade your system to a supported FreeBSD stable or release / security +branch (releng) dated after the correction date. + +2) To update your present system via a binary patch: + +Systems running a RELEASE version of FreeBSD on the i386 or amd64 +platforms can be updated via the freebsd-update(8) utility: + +# freebsd-update fetch +# freebsd-update install + +3) To update your present system via a source code patch: + +The following patches have been verified to apply to the applicable +FreeBSD release branches. + +a) Download the relevant patch from the location below, and verify the +detached PGP signature using your PGP utility. + +# fetch https://security.FreeBSD.org/patches/EN-15:14/ixgbe.patch +# fetch https://security.FreeBSD.org/patches/EN-15:14/ixgbe.patch.asc +# gpg --verify ixgbe.patch.asc + +b) Apply the patch. Execute the following commands as root: + +# cd /usr/src +# patch < /path/to/patch + +c) Recompile your kernel as described in +<URL:https://www.FreeBSD.org/handbook/kernelconfig.html> and reboot the +system. + +VI. Correction details + +The following list contains the correction revision numbers for each +affected branch. + +Branch/path Revision +- ------------------------------------------------------------------------- +stable/10/ r272967 +releng/10.1/ r287146 +- ------------------------------------------------------------------------- + +To see which files were modified by a particular revision, run the +following command, replacing NNNNNN with the revision number, on a +machine with Subversion installed: + +# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base + +Or visit the following URL, replacing NNNNNN with the revision number: + +<URL:https://svnweb.freebsd.org/base?view=revision&revision=NNNNNN> + +VII. References + +The latest revision of this Errata Notice is available at +https://security.FreeBSD.org/advisories/FreeBSD-EN-15:14.ixgbe.asc + +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v2.1.7 (FreeBSD) + +iQIcBAEBCgAGBQJV3NfOAAoJEO1n7NZdz2rnImEP/j4kfmZ2XqZ/zbQINCPfybyU +oSIgqyD6u4G/hy3gS4k7eLk6tQdUpnYzcoLLfeq0F2uY3DmWXJDBAKG0Bg7QaSzJ +3wWyZsN6XHkgNNCFGFsmep//8kAAXoAgJ2IoIPLe6eRHimESLtW2xlnow5PFL4Aw +JMj5B/RoxtQZ/phE1zJym7eSpjVUbBrqhj/KkJUZ0W6WOkaT0GPVctvHlc2buZh7 +6u17LKgZaMMmmCvBNggkYGfiE51aJ9I0n5FdAHvlcaLCw+K58/Q6M2CRpMIorgh6 +uaUHLZdT8VcZ8KVmDdBul0sZ9pkprHZ4J/htEL2mCOpmsRn/lduHAvf921mtX/64 +Msg8bdXM48Q5WCv9sfcmMVgMA+6m+MekKc9wKYWw6Ldy0wcQ874jE+nuh3KBq+6X +Te4VbxrwuAnspqrnt4Q4NXnqxyElO0BGo6lCSEUGCRje+hlOWG2WhftEV894cRG+ +JCS6YRvX5C7i8+XD+MhvTeAi7pbaZkq6ODxQAOZgbz4JMQFq8ldOgvLdhUndKGlH +xJ9/pK4u5kxXyVx4HPGm0MYlijjHDi/sSAJADutikpNOzlhyZqubA8LgLoBXtyfF +/Kk3GYOJvOMSK8QB7YxFRS+zPi1YxAFPEJb7ZV2ygf6RMZpIFoRLFt1kDszo+TeZ +iKXcFJvlwI49poLiz7Qs +=i/HZ +-----END PGP SIGNATURE----- |