Database/Firmware, BMC & network fabric
Cisco NX-OS (MPLS traffic handling / netstack): FABRIC DOS: crafted MPLS traffic restarts netstack, which stops
CVE-2024-20267Firmware, BMC & network fabriccurated
Impact
FABRIC DOS: crafted MPLS traffic restarts netstack, which stops the switch forwarding or reloads it. Applies even where you are not consciously running MPLS, because the parse path is reachable regardless. One packet stream, one leaf down.
Who can reach it
Unauthenticated, remote — an attacker able to send MPLS-labelled frames toward the device.
What to do
NX-OS upgrade plus reload. Filter MPLS ethertype at the fabric edge as a live mitigation if you do not use MPLS, which most GPU-cluster fabrics do not.
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.