CVE-2024-42291 addresses a vulnerability in the Linux kernel's ice driver where there was no per-VF limit on the number of Flow Director (FDIR) filters. While the iavf driver limits the number of FDIR filters a virtual function (VF) can request to 128, the ice driver lacked this limit, allowing a malicious VF driver to request excessive filters and exhaust resources for other VFs. This issue has been resolved by adding a similar per-VF limit in the ice driver.